x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0xe200, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:21 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x4], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:21 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x5], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:21 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x7f00, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:21 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:21 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x98302, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0xa) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000000e2000000000002907800000000e0000001220090780000000050a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3b4dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"], 0xec) 23:06:21 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x6], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:21 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x7], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:21 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r1, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r1, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000080)=0x7) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r3, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000000)={0x7, 0x9, 0x10001, 0x9, 0x9, "b8007a87b73100b0914b30f1d46090e0f3f0db", 0x8, 0x80000000}) dup(r2) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x22, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:21 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x8], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:21 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x9], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:22 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0xa], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:22 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:22 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0xb], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:22 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x2, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:22 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0xce00, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:22 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0xc], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:22 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0xd], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:22 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0xe], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:22 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x10], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:22 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @void, @eth={@multicast, @remote, @void, {@ipx={0x8137, {0xffff, 0xbf, 0xff, 0x1, {@current, @broadcast, 0x7}, {@random=0x4, @random="f16ec8cc3562", 0x4}, "49ba15b0217ed6b053fc29fa62bbe36abb8949c3a43588a067adabb0054dc85cd90436f71b0f8553bc03d5e5fa8d561322c21a32aeb06d9ebad569e6c5858e081d721c71bda6bc1217f19be38d5ce5e129d24f14e41ec0fd7973d9b929e3ee2b9173c6f5d8366abf57e5dfb0ca3ed3030b679e8a2e59cb1c92aa160a5566bcbdd5b80bd3159611d52dae81bf7f7451e17973c805ce5d18f4fc65f7152c9a4d019b"}}}}}, 0xcd) setsockopt(r1, 0x2, 0x6c, &(0x7f0000000000)="7b293c768fa48b8e93c4c12fc118dc1266c402c54aed19aa5de3e6b233bd31f74e0ad4b16529565c5d0dec4e95ad0c597aa050333a897a37aeab74bddfbdfcc6c86fddc5197ac6c108029be1ec9f099b33ff4360fd067cad35bf497200ec4bef5818357cf48a085ba8d14c779ac1f22cfdedc7b4bca4e483961b5b9369945692fb233dc81ac079e08f811120ae8bceecb1e7b928eecbaad1424e49420e9abc69039e07d1b750eef99a97360f897a9ae404333574f879", 0xb6) 23:06:22 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x11], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:22 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x12], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:22 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x25], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:22 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x2, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:22 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x3, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:22 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x48], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:22 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0xe000, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:22 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x4c], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:22 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x60], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:22 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f0000000500), 0x0, 0x6) ioctl$TCSETSF(r1, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r2, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r2, 0x5453, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x68, 0x0, 0xa00, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0xe7d, @link='broadcast-link\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "39b8ffd5c529579833773a721fb97555a67ed92f23fc493ed5e06e58604b9dd59d0d594dca7821b1cbf02084027227cddce57dcf9f003fa31d3d5d2d9ab081d9993883f2418595fed7ecf374ea46e3d90a83a87c7161ea89e18a42f1ba5552f05c0c71fdd67f497917911548e2e825b0a8fe36ea9bbddd2f3b049baf31be1dfed02eda22c2160e69a7fefb35242fff04fa2326275bf9e837846600abb52cbc1d425a78b8602c2707965ba07dd56d265c863bbd4ca4df496c676158286baf6c492df11ee13ede48f7e71ffb8bb558be7b6b8a193dac806d3d2a2b3e35eedd0486593284ee418e4d5f989f68ccdf34afbd7b286c6b391c5975cc9d5d880bfa34e6"}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r3, &(0x7f0000000500), 0x0, 0x7ffff003) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000780)={@remote, 0x5}) ioctl$TCSETSF(r3, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) write$UHID_CREATE2(r3, &(0x7f0000000400)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x87, 0xff, 0x5, 0xf0d6, 0x5, 0x3, "1237b4bd9bc96a2995820898937b1cfac33d31ee23003252e69ea47c9f2e6edbdf0eb9fc1433127d269947b4e04b7a52ee2d5d2fc703b2d85a2a526cd7fedc7687aeed1d0348f3b25e199e701a8190d440d67cb817b13f728ba92058aa23508de3710f08334dcaa19049f851c5aef36a149382bfde883f49954e7c94f96303049a1a115638dbae"}}, 0x19f) write$tun(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="ffff01040200ffffffff480c1089ec320002ffffffff00000000000007ff27f616f1d495ffa6f29c38b7e21084d3ca0bf096173b8f90555fe03c012cb73391125822b90a0f4483c87d746500bf39b746d25ea533255d7ecc77a18f05a1b696310503673ec90595792ce6cca4622312e76f9194be605afb8fa6a9593f2bce1d22a955b86d104d6f83ce2cc0729c3b6d07d83fc9ef8a6adba6ee44d2d4298484c58cfda79ae550c6b7801ac2c0b5e56237a2816a94dad48114f9edc055d7a24e7bc47708b8cedee651fec64ff3dd1a3631abdd30c86b2ae6dd4a6df9b2c2c507c16d0de4f2a08fccd0a45d65d0b4ee17b30ba68b8db1d5be1f253f2dfc970ba1abf0488be9fdc5d97fd67ec4698f0553d578cdc46099be714ddcc41480c133837eab09fc5959f68d9b1b57e9601cc6c4c5bc4f10c9b0c1b674f5bc02ef2a4d1e1f0124711e157e0fa81407d8e28a26ab0f8a9c73ae043fdd34934b0e567ff7722f0aff6792d42946f1abd1bb546a640df43e04d12d93b59ed7df667494eac5278eb32b304fa51728c9291864aa7e67e4547e1e2e9dd5b05caee78f48878ad6ebc1454233ac6ab4d8f3b703ef36e808"], 0x104) 23:06:22 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x68], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:22 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x3, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:22 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x4, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:22 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x6c], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:22 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d2406"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r1, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r1, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002a00270d00"/20, @ANYRES32=r5], 0x1ec}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c0}, 0x400c0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="ae0945e322570c042dc183fd9ccd4f2292f20d5da648439397db980f8de6456d"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 23:06:22 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x74], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:22 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0xe200, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:22 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x7a], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:22 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r0, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r0, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) mmap$usbfs(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000005, 0x40010, r0, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) write$tun(r1, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x22, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b4202000000000000008522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be307eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc00389700"/198}}}}, 0xec) 23:06:22 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0xee], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:22 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0xfe], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:22 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x110], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:22 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x12e], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:22 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x4, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:22 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x11, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:22 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x19e], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1351.864536][T10267] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1352.114573][T10267] usb 5-1: Using ep0 maxpacket: 8 [ 1352.234625][T10267] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1352.244701][T10267] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1352.253531][T10267] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1352.424617][T10267] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1352.433688][T10267] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.442297][T10267] usb 5-1: Product: syz [ 1352.446741][T10267] usb 5-1: Manufacturer: syz [ 1352.451324][T10267] usb 5-1: SerialNumber: syz [ 1352.915520][T10267] usb 5-1: USB disconnect, device number 116 [ 1353.704542][T10267] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1353.944571][T10267] usb 5-1: Using ep0 maxpacket: 8 [ 1354.064623][T10267] usb 5-1: config 1 has an invalid descriptor of length 22, skipping remainder of the config [ 1354.074947][T10267] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1354.083786][T10267] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1354.254605][T10267] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1354.263831][T10267] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1354.272395][T10267] usb 5-1: Product: syz [ 1354.276820][T10267] usb 5-1: Manufacturer: syz [ 1354.281392][T10267] usb 5-1: SerialNumber: syz 23:06:25 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:25 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x250], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:25 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x22, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r2, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r2, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000340)="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") 23:06:25 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x11, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:25 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0xce, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:25 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d2406"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000040)='./file0\x00', 0x5, 0x5, &(0x7f0000000400)=[{&(0x7f0000000100)="b54d31ae2257cff9f78e4773abaace44e3184ad68f343882c848d5c746d4bfd6453d8315c2735e30d4c379e898354b0312b95b7633c06cd0a784d14590c74dda391d5678f96cea", 0x47, 0x7}, {&(0x7f0000000180)="6870fae19de833f3cab7e06f4478f8", 0xf, 0xfff}, {&(0x7f00000002c0)="b87272e805550314429c51c274ce06281381c820f3971d9508947f330aa0b6b01f6ce0b83473bd79ede801d7bdfc7f5f4ad34ff44f3b0863a2f46296cee6aaebaebb0bda4f3f4bdb47e5a73918b7c3d7158cf7059b79c997020402883c3835b9e820fc6cf3acc0cec6e2c4821f53f958a9f948fc42bcaabc3c3d95b67e5edb3e204f2774d2a24457038dcf1ef37a2deb33efe4f38418947ac6c719c3d35c8033bff6a2b2ef8c7438482fa205f112c2a4ac70906f5d6d712b3478e6534fa7331d60101839f59795542188c1bb8bfc9f09f81806", 0xd3, 0xffff}, {&(0x7f0000000580)="c7a18a554516defd01e434b7709d1e5ca3be2a21034e4a479cf7281fc125c726913326fb841365d8fbdc018685ec12e5f77c918299204ef2b59bd07b32644b8d0045daf8b463621abe6c427ba795892fe80cb9cb3793700ef42b0e448e56bf9aca3eefb7b8187f56910beb1601d99cfb50f43dfda54695fb173f009995cfe77540c3", 0x82, 0x8}, {&(0x7f00000003c0)="cd367c68560d76c5ce7cc8ec2af0a50a328c381595b11db2c0", 0x19, 0xcd9}], 0x0, &(0x7f0000000500)) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0003020036483203da722822d609aa4c98b530d7ffe1b391f68898ea104e21eeb58b26db"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000039542f108c07021047e6000000010902240001000000000904db00010a04c80009210300000000810009050a"], 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r2, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r2, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) write$P9_RSYMLINK(r2, &(0x7f0000000480)={0x14, 0x11, 0x1, {0x4, 0x0, 0x5}}, 0x14) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r3, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) accept$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14) syz_usb_control_io$printer(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="000083"], 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) 23:06:25 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x252], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:25 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x2d2], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:25 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x300], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:25 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x500], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1354.680652][T10267] usb 5-1: USB disconnect, device number 117 23:06:25 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x600], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:25 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x700], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:25 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x2, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:25 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x900], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:25 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r2, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r2, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x54) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x22, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:25 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0xe0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:25 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0xa00], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1354.943898][T27035] xt_ct_set_helper: 64 callbacks suppressed [ 1354.943902][T27035] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1354.951865][T27037] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1355.054603][T10267] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1355.294539][T10267] usb 5-1: Using ep0 maxpacket: 8 [ 1355.414576][T10267] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1355.424767][T10267] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1355.433620][T10267] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1355.604633][T10267] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1355.613672][T10267] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.622184][T10267] usb 5-1: Product: syz [ 1355.626601][T10267] usb 5-1: Manufacturer: syz [ 1355.631204][T10267] usb 5-1: SerialNumber: syz [ 1355.956303][T26979] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1355.964133][T26979] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1355.972764][T26979] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1355.980804][T26979] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1356.244956][T26979] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1356.256466][T10267] usb 5-1: USB disconnect, device number 118 [ 1357.024536][ T9987] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1357.264552][ T9987] usb 5-1: Using ep0 maxpacket: 8 [ 1357.384603][ T9987] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1357.394733][ T9987] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1357.403588][ T9987] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1357.584592][ T9987] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1357.593647][ T9987] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.602280][ T9987] usb 5-1: Product: syz [ 1357.606751][ T9987] usb 5-1: Manufacturer: syz [ 1357.611321][ T9987] usb 5-1: SerialNumber: syz 23:06:28 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0xb00], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:28 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0xce, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:28 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x3, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:28 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0xe2, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:28 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r1, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r1, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) getsockopt$inet6_mreq(r1, 0x29, 0xe, &(0x7f0000000000)={@private1}, &(0x7f0000000040)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000380)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @local, @multicast1}, @echo_reply={0x22, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:28 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r0, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r0, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "39b8ffd5c529579833773a721fb97555a67ed92f23fc493ed5e06e58604b9dd59d0d594dca7821b1cbf02084027227cddce57dcf9f003fa31d3d5d2d9ab081d9993883f2418595fed7ecf374ea46e3d90a83a87c7161ea89e18a42f1ba5552f05c0c71fdd67f497917911548e2e825b0a8fe36ea9bbddd2f3b049baf31be1dfed02eda22c2160e69a7fefb35242fff04fa2326275bf9e837846600abb52cbc1d425a78b8602c2707965ba07dd56d265c863bbd4ca4df496c676158286baf6c492df11ee13ede48f7e71ffb8bb558be7b6b8a193dac806d3d2a2b3e35eedd0486593284ee418e4d5f989f68ccdf34afbd7b286c6b391c5975cc9d5d880bfa34e6"}) r1 = syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYBLOB="ea522aaa0113bb0679a355f2f86e9edeeb682f0460b4dfb2240a2caa6226784120d58f62545a9f11182046649eac8bdbfa450ee105cd500158462f929a71f954de1f8993d536adb077866fbbc68e0bc653b7dcc661679629f950b76fc26f561fd91d2ee81e197a54f0dcf751aa093601c093e03838d9cb210ff8bbfa84aef8f66ce58f642e745d6f022c64db7e5d6791a9b76243541653d257e0a62e01c3d379de868c4ffd44ea2e34aec7a8d8a1e82f94ea0426bb9340012020e336", @ANYRES32], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="00f846a63fb100"/30], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000540)={0x24, &(0x7f0000000380)={0x0, 0xe, 0x95, {0x95, 0x21, "abe650ee292190f67feb5e4f5115a6b587c81195b6a76e7481773718a6bbf1cb8d3c180d1b3f7e5ba95275cd390109fb87a55d6d432a5523d4d9b6a0ac6feb170462e7fb8d77f773720d0fc85833c7f44364dac6bcc8339c551fb2e3a5c5528c6fe026080a438e952bf3685c74ba7f4e2c10b8f0ccb76893b7e3f3ffe9bb2597b2ce83d976e07e3759bcdd938a68ecdfc6c0c5"}}, &(0x7f0000000440)={0x0, 0x3, 0xf5, @string={0xf5, 0x3, "084ff1500aea484943548c5de35722a7bd474d192e40de30b80d00cc0da3ddceeada2cfa947f596f0a02e887088751df75f42b0d5cb89fcc810b8d747ce52de24c214970505be4ad239fd1e27ab817e41faff337f7cb20e4746edecefc5b64aaf9890a88a4257962a0eb14ef19f6cc808d309c429679606fb70dbf021f94857f9566a622dbd8ef2184b9ff590db3a59302a8d2b6ca7d139916a990d7f1a45e59fd5c6798eb770ae6db0178f5fa34977e1d10b385f8911d43b0a02e1fcbb413c000018473aaedfd5a4f7f1f21fe9b763df12df8ceeb2d7d578e45e1cfc9b3de42d06ec75e15c2859a3a40fa5b4086d0ea4cf9df"}}, &(0x7f0000000080)=ANY=[@ANYBLOB="000080000000000000ec947e18000000"], &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x92ca, 0x6, 0x1, {0x22, 0x81e}}}}, &(0x7f0000000800)={0x2c, &(0x7f0000000580)={0x0, 0xc, 0x81, "f2e191ee9ea0551454fe07671311a151880773d3cbd919125d4b6d744cffd7f3e01655bdd71afc5d62c78e990f266c4583c7a529cbb7823cb134c6948a9c0044f02f7fe08451b063d60e5c6926071f25187bcb3ca48a8c9cefd57e8bae96a390a3ec93423940d60bac49dc3191eac029ceeec4975705dfca5394196f90bd2ccc1b"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000006c0)={0x20, 0x1, 0x6c, "57415caa93ac5e51d68850a285236014d6c86c10f8b429469e89ddf90b93a653fd0f480f8795453c00601ebe0d4097ad3d8595aaa5c402998b2102971953bc4bcf518f57ea7a699e4a568a975df5a22ac0921508ee3fddd8409af97c2e058bf49f5b1714c3041d9aa7053f9f"}, &(0x7f0000000740)={0x20, 0x3, 0x1, 0x1}}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000880)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [], "", [[], [], []]}, 0x340) setgroups(0x4003, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) preadv(r2, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r2, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000000)={0x0, @rand_addr, @private}, &(0x7f0000000040)=0xc) 23:06:28 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0xc00], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:28 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0xd00], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:28 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0xe00], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1357.717476][ T9987] usb 5-1: USB disconnect, device number 119 [ 1357.738921][T27063] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1357.757804][T27074] xt_CT: You must specify a L4 protocol and not use inversions on it 23:06:28 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x1001], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:28 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x1100], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:28 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x300, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:28 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) clone(0x2c0000, &(0x7f0000000000)="a82452417f6d2affbec3efa75c303ce6448defaccf2f2cd1a9a29a8398d0a443644954bd6950ab71fe82e4ff8c4436135b8be9da15a12ba7ed3d1dfb174ae55d0f1a05b95c51e8240250f2b05e86a428a10f13e6013a9a531039fae0a46190d277b375b30e25e698ee049f2cf32cf7aea945572b4b9fb0cf0edd6a5c2cbd6661177cffa541027a8b831ed4495a", &(0x7f0000000100), &(0x7f0000000180), &(0x7f0000000340)="11bf625b9412bc54cc63a2f7bc4a7b0812797b53617c24eeb2e5b13ca070d96e8c5db7daf6b16f65a612055a6c0a9a67592a17b658767f7bd7d4688a7bead38ffdeb7861aa93dafa7fbb30bacca689afbca60df83b84e8b0be4ca27bee2ab0d304eb8c26c817824b38c33af64be9d9fe6b273d697355144d3addd2e2aa629330769788ec350665e8b40c34946daafdcb857a1c4b634e3345814689b1deaac0edc23a716c28df5d6e6968f374636eec1ab6286ec7d344042af38d838ecbc9ca92964f95bc5edba4d5625bd604a6a70b1fd3aedea29827c6") ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x22, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) [ 1357.783270][T27083] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1357.792943][T27083] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1357.816820][T27094] xt_CT: You must specify a L4 protocol and not use inversions on it 23:06:28 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0xe0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:28 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x1200], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:28 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xec) 23:06:28 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x4, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) [ 1357.896757][T27116] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1358.094527][ T9987] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1358.364565][ T9987] usb 5-1: device descriptor read/64, error 18 [ 1358.754549][ T9987] usb 5-1: device descriptor read/64, error 18 [ 1359.024539][ T9987] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1359.294572][ T9987] usb 5-1: device descriptor read/64, error 18 [ 1359.684587][ T9987] usb 5-1: device descriptor read/64, error 18 [ 1359.804619][ T9987] usb usb5-port1: attempt power cycle [ 1360.514524][ T9987] usb 5-1: new high-speed USB device number 122 using dummy_hcd 23:06:31 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x1100, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:31 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x1f00], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:31 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0xe2, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:31 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x11, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:31 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'veth1_to_hsr\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xec) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10, 0x80800) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x4e22, @empty}, {0x306, @broadcast}, 0x14, {0x2, 0x4e21, @local}, 'tunl0\x00'}) [ 1360.684608][ T9987] usb 5-1: device descriptor read/8, error -61 23:06:31 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x2000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:31 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d2406"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r1, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r1, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="ec0100002a00270d000000000000000000000000d3b78f1173e559a9bf623a892a97945da470f44614d3951182c9d5e4c50cec0082eb14bc4d48e0980905c67c8e959c74e1a8e641e7550a302f676212e947336a07de60b2f54c309ee8e000676c351060208727c10d4c2e79d665de3814eace62c2a3dfa99600cffd12ac6f93eb830cab9e4c2ce2c3b94afa7119c79e4fef6417b210b0959a8c14a30521d2c576a3e9b5a5ec51da7a56a9b15604a1d4336a3b009a8c60c922d0b50a94146571b359f34a", @ANYRES32=r2], 0x1ec}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r3, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) r4 = accept4(0xffffffffffffffff, &(0x7f0000000400)=@sco={0x1f, @fixed}, &(0x7f0000000200)=0x80, 0x0) bind$xdp(r1, &(0x7f00000003c0)={0x2c, 0x1, r2, 0x35, r4}, 0x10) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000100)=0x44) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000980)=ANY=[@ANYRESDEC, @ANYBLOB="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", @ANYRESHEX, @ANYRESDEC=r4], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 23:06:31 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x2500], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1360.762601][T27148] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1360.790497][T27159] xt_CT: You must specify a L4 protocol and not use inversions on it 23:06:31 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x2e01], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:31 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x4000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1360.809641][T27167] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1360.819501][T27167] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1360.837355][T27172] xt_CT: You must specify a L4 protocol and not use inversions on it 23:06:31 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x4800], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:31 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x4000, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) [ 1360.868413][T27186] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1360.878161][T27186] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1360.902677][T27191] xt_CT: You must specify a L4 protocol and not use inversions on it 23:06:31 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x4c00], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:31 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0xce, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:31 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:31 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x5002], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1360.914567][ T9987] usb 5-1: device descriptor read/8, error -71 [ 1360.929304][T27198] xt_CT: You must specify a L4 protocol and not use inversions on it 23:06:31 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x5202], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:31 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x7f00, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) [ 1360.985861][T27209] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1361.414518][ T9987] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1361.504569][ T9987] usb 5-1: Using ep0 maxpacket: 8 [ 1361.624574][ T9987] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1361.634653][ T9987] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1361.643516][ T9987] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1361.814579][ T9987] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1361.823627][ T9987] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1361.832174][ T9987] usb 5-1: Product: syz [ 1361.836596][ T9987] usb 5-1: Manufacturer: syz [ 1361.841166][ T9987] usb 5-1: SerialNumber: syz [ 1362.305666][ T9987] usb 5-1: USB disconnect, device number 123 [ 1363.054527][ T9987] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1363.294510][ T9987] usb 5-1: Using ep0 maxpacket: 8 [ 1363.414557][ T9987] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1363.424634][ T9987] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1363.433496][ T9987] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1363.614585][ T9987] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1363.623671][ T9987] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.632191][ T9987] usb 5-1: Product: syz [ 1363.636609][ T9987] usb 5-1: Manufacturer: syz [ 1363.641180][ T9987] usb 5-1: SerialNumber: syz 23:06:34 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r1, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r1, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000040)={0x1}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$batadv(0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r3, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffff8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000032}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="100026bd7000ffdbdf251200000008000b000300000008002c000300000005002a0001000000d7ca18f0cf5229dc54511d1cb346407d0d63d0e414c7ec14dfb4c739dccce6961ba70a71374c0a1de24bb2e7443e2100000000000000008779a107eb04d8ab693bcedf324aaf"], 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x40000) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r4 = fcntl$getown(0xffffffffffffffff, 0x9) r5 = syz_open_procfs(r4, &(0x7f0000000540)='net/netlink\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r5, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) write$UHID_CREATE2(r5, &(0x7f0000000340)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0xd2, 0x6a9, 0x1, 0x401, 0x10001, 0x6, "0d06ce468f2b4b37afa74429f2d468c094b81257fd1dcc799988950db706c381be7dc9af93f2afe96eba3960face041b427ddfb43df3a65cb1f4bbc0dd4b4b5cdb2da73fa2a7e12fcaa583896b4440c8a82d4c67b046c46b3986aee3747cd1ca5357e8d55c9bd6df05e310e74ef0681973a93b2611c5e40bc1e225fed25806a87dd64535611be484b9dc5bd4a09451d3873fe43d26bdcbad55f09236df760b850f426b629e7d2c42a43dbc2bead6e517f86a0fa7e05fb24c30eb7910b3a703ae14f258ecca24a39d9fd5e9823756c1b52858"}}, 0x1ea) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000e0000000450000e2000000000002907800000000e00000012200907800000a0050a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51cbb040500b2f17999490c791706035343eb4370e844ce0435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c50000de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"], 0xec) 23:06:34 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x6000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:34 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0x2, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:34 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0xe0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:34 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x40044) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r2, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r2, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "39b8ffd5c529579833773a721fb97555a67ed92f23fc493ed5e06e58604b9dd59d0d594dca7821b1cbf02084027227cddce57dcf9f003fa31d3d5d2d9ab081d9993883f2418595fed7ecf374ea46e3f70a83a87c7161ea89e18a42f1ba5552f05c0c71fdd67f4979179115488a1e52caf823590c9bbddd2f3b049baf31be1dfed02eda22c2160e69a7fefb35242ff9e837846600abb52cbc1d425a78b8602c2707965ba07dd5892518c03bbd4ca4df496c676158286baf6c492df11ee13ede48f7e71ffb8bb558be7b6b8a193dac806d3d2a2b3e35eedd0486593284afbd7b2833d24ecb22a58de95d880bfa34e600"}) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002a00270d00"/20, @ANYRES32=r4], 0x1ec}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000400)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0x3c, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x341}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x49c90}, 0x48000) write$P9_RSTAT(r2, &(0x7f0000000000)={0x40, 0x7d, 0x2, {0x0, 0x39, 0x401, 0xba68, {0x4, 0x4, 0x4}, 0x80080000, 0x3f, 0x4, 0x3, 0x0, '', 0x3, '*):', 0x2, '&,', 0x1, ')'}}, 0x40) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 23:06:34 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0xce00, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:34 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x6800], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:34 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x6c00], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:34 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x7400], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:34 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x7a00], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1363.827468][ T9987] usb 5-1: USB disconnect, device number 124 [ 1363.855225][T27246] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=27246 comm=syz-executor.1 23:06:34 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x9e01], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:34 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0xd202], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:34 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x22, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r2, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r2, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000000)) 23:06:34 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0xee00], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1363.946225][T27287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=27287 comm=syz-executor.1 23:06:34 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0x3, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:34 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0xe2, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) [ 1364.184513][ T9987] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1364.454513][ T9987] usb 5-1: device descriptor read/64, error 18 [ 1364.844569][ T9987] usb 5-1: device descriptor read/64, error 18 [ 1365.114578][ T9987] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1365.384507][ T9987] usb 5-1: device descriptor read/64, error 18 [ 1365.774512][ T9987] usb 5-1: device descriptor read/64, error 18 [ 1365.894609][ T9987] usb usb5-port1: attempt power cycle [ 1366.604506][ T9987] usb 5-1: new high-speed USB device number 127 using dummy_hcd 23:06:37 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0xe000, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:37 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0xfe00], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:37 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r2, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r2, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) ioctl$TIOCSIG(r2, 0x40045436, 0x1e) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000e0000000450000e2000000000002907800000000e0000001220090780000000050a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed9852278ff0f0000000000006d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f685a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be315d73b341d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"], 0xec) 23:06:37 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0x4, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:37 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x300, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) [ 1366.774605][ T9987] usb 5-1: device descriptor read/8, error -61 23:06:37 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="5eed5154ad1201000000010901f681bb8c5a3bc9128257d6"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000323961081165c1eeca03ebfcfc0ba0000000203"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0xa4, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x2, 0x1, 0x4, 0x40, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "94f2d2cc6f"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0x9, 0x9, 0xe0}, {0x6, 0x24, 0x1a, 0x80, 0x10}, [@network_terminal={0x7, 0x24, 0xa, 0x9, 0x5, 0x80, 0x3}, @mdlm={0x15, 0x24, 0x12, 0xfff7}, @mdlm={0x15, 0x24, 0x12, 0x860b}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x6, 0x2, 0xdf}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0xc0, 0x3f, 0xcb}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0x8, 0x80}}}}}}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x9, 0x5, 0xad, 0x0, 0x20}, 0x19, &(0x7f0000000180)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "de586bb1bf4597d8c94b6e60e2d115b5"}]}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x439}}]}) syz_usb_connect$cdc_ncm(0x2, 0x92, &(0x7f00000002c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x2, 0x1, 0x19, 0x0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "ee99f9"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x2, 0x40, 0x4}, {0x6, 0x24, 0x1a, 0xc082, 0x5}, [@mbim={0xc, 0x24, 0x1b, 0x6aa9, 0x5, 0x2b, 0x6, 0x4, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0x3, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x7, 0x2, 0x45}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x3, 0x3f, 0x5}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0x74, 0xc7, 0x3, 0x10, 0x1f}, 0x5, &(0x7f0000000380)={0x5, 0xf, 0x5}, 0x9, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x2401}}, {0x81, &(0x7f0000000400)=@string={0x81, 0x3, "c4133bffe4492b537054ba871201096206d9c0cc29ec3c0cdfc8919932e1e7d0a256393f232b2887436d8f2eb5d7c664c818d7894e4b936cd7cb92a5d7281f5c79f3e1c79871ab4886a758499c4fbc39f341edfc29e91a2bc4d7fdfcc5826c1c74e32e27459402cc54dbca3bf299376524bec911b32eebb5c9297f82a3746e"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x411}}, {0x7d, &(0x7f0000000500)=@string={0x7d, 0x3, "d9d57732601f5fe5c4f4ffcdd2d119ed201c6c73d532015fdb3b6eb9b50dab8566c5e303c9263944f1272278cf3e8a25a9fcfc5aca5bac06fca4bd9bc2101372dbcc36dadd76b8501d18b10e681c614d98641007ca21866778d7cfaba22bbbc680e48f154a2a93d83b83bb399252a3967c869bfd0ef90824182dce"}}, {0x11, &(0x7f0000000580)=@string={0x11, 0x3, "e37199dc84618b1d8bf7a30ff28d1d"}}, {0x1c, &(0x7f00000005c0)=@string={0x1c, 0x3, "8503f2f889cab8c1fcfe88b2fce080cb5cd81887f27604a713f0"}}, {0x58, &(0x7f0000000600)=@string={0x58, 0x3, "039ed6987d46859c4e87120950d5564ce0d1bd35a3e511881a9c9d26de120a08e1e694033eaf4ddffbfed03a0633f1b899923597293dc138f2836a0462ac72539198f15d2cb96717d0082b152a337d2ce47d7e75832d"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x441}}, {0xb4, &(0x7f00000006c0)=@string={0xb4, 0x3, "1520f6fff1c16eecd2d90e5bbdcdca109633192b1b356aaa6fd0db020e6812ce513d6eecd9b3f03c48c29364ee102f09516f06fa27b0473edd0fb8c3296bb0fca5d068dfe0f221696ed1e2d3b1d3e81137a31451eddcf8e74cd666da9e8e8c21bbf64a8bcc9dd9cb362707c720eb66a0948c457151160d41a600cae23f7e355ec66fc874cde75f921f1fac360d3501aea46523cfa148bb8cde97b54b3e85cdd9e42883484a7e75323537e036b6eedd2ed292"}}]}) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000039542f108c07021047e6000000010902240001000000000904db00010a04c80009210300000000810009050a"], 0x0) syz_usb_control_io$printer(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="000083"], 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) 23:06:37 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x40000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:37 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x1000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1366.852038][T27323] xt_ct_set_helper: 10 callbacks suppressed [ 1366.852042][T27323] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1366.879779][T27334] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1366.889114][T27334] xt_CT: You must specify a L4 protocol and not use inversions on it 23:06:37 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x2000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:37 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x3000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1366.910264][T27340] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1366.919844][T27340] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1366.945024][T27348] xt_CT: You must specify a L4 protocol and not use inversions on it 23:06:37 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x4000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:37 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x1100, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) [ 1366.965023][T27355] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1366.974735][T27355] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1366.984535][ T9987] usb 5-1: device descriptor read/8, error -71 [ 1367.005774][T27361] xt_CT: You must specify a L4 protocol and not use inversions on it 23:06:37 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0xe200, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:37 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x5000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:37 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0x11, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:37 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x6000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:37 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/177, 0xb1}, {&(0x7f0000000380)=""/136, 0x88}, {&(0x7f0000000540)=""/252, 0xfc}], 0x3, 0x7fffefff) ioctl$TCSETSF(r2, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r3, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r4, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "39b8ffd5c529579833773a721fb97555a67ed92f23fc493ed5e06e58604b9dd59d0d594dca7821b1cbf02084027227cddce57dcf9f003fa31d3d5d2d9ab081d9993883f2418595fed7ecf374ea46e3d90a83a87c7161ea89e18a42f1ba5552f05c0c71fdd67f497917911548e2e825b0a8fe36ea9bbddd2f3b049baf31be1dfed02eda22c2160e69a7fefb35242fff04fa2326275bf9e837846600abb52cbc1d425a78b8602c2707965ba07dd56d265c863bbd4ca4df496c676158286baf6c492df11ee13ede48f7e71ffb8bb558be7b6b8a193dac806d3d2a2b3e35eedd0486593284ee418e4d5f989f68ccdf34afbd7b286c6b391c5975cc9d5d880bfa34e6"}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r5, 0x5453, 0x0) write$tun(r0, &(0x7f0000000040)=ANY=[], 0x4a0) [ 1367.053262][T27371] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1367.474556][ T9987] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1367.654557][ T9987] usb 5-1: device descriptor read/8, error -61 [ 1367.924564][ T9987] usb 5-1: device descriptor read/8, error -61 [ 1368.044582][ T9987] usb usb5-port1: unable to enumerate USB device 23:06:40 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c00af040000000904000001020d2406"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 23:06:40 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x7000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:40 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x4000, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:40 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0xce, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:40 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x22, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) r2 = syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x5, 0x0, 0xcf, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x7, 0x1, 0x1, 0x40, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x64, 0x3, 0x81}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x6, 0x4, 0x36, 0x20, 0x81}, 0x26, &(0x7f0000000080)={0x5, 0xf, 0x26, 0x3, [@ssp_cap={0xc, 0x10, 0xa, 0x3, 0x0, 0x9, 0xf00, 0x8}, @wireless={0xb, 0x10, 0x1, 0x2, 0xec, 0x4, 0x40, 0x1, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x7, 0x3, 0x11}]}, 0x3, [{0x5e, &(0x7f0000000180)=@string={0x5e, 0x3, "e03e41b824db4ae98a82cf086eb326e61511639fe01ef565d376c7efb34060b5cd0293b90902c953c8aec1fa61b4b5c277235cc88bcd368ea3aea271d1a5e5488b40045f660f216f7ff746de23ea1f0286e82459deb633f1f6e1d170"}}, {0xe1, &(0x7f0000000340)=@string={0xe1, 0x3, "647a36359dd926ad13925e8b648ddd2aca037739b9c33327da835cac747808107367d238e276b2044d92a155eb4386c03dfc3286dde9983d37815b98d4394e0bc188afec65d213db62ac7b68803642430494296dbbcab75075b1fbf1049c931803d63615bd443fffaeb03e1ec7c6da9366b7af95cf6077dff72bf7701bc2016199c597b8265dc8c7af6c865b5577f1c5ef415aa7b5d324a1c44e10b99e35541b2ccab21b9161f479d540b0107b1685aba62756ac0f1344e9a9f9bc89e20534b17cdc13de304ede0001694900692eb85a125eeb4f568fb2494d3eccde9d914b"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x404}}]}) syz_usb_ep_read(r2, 0x1, 0x15, &(0x7f0000000480)=""/21) 23:06:40 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x8000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:40 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x9000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:40 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0xa000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:40 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0xb000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:40 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0xc000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:40 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0xd000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1370.324496][ T9987] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1370.574515][ T9987] usb 5-1: Using ep0 maxpacket: 8 [ 1370.694581][ T9987] usb 5-1: config 4 has too many interfaces: 175, using maximum allowed: 32 [ 1370.703254][ T9987] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1370.713371][ T9987] usb 5-1: config 4 has 1 interface, different from the descriptor's value: 175 [ 1370.722441][ T9987] usb 5-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1370.894599][ T9987] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1370.903641][ T9987] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.912185][ T9987] usb 5-1: Product: syz [ 1370.916609][ T9987] usb 5-1: Manufacturer: syz [ 1370.921225][ T9987] usb 5-1: SerialNumber: syz [ 1371.565465][ T9987] usb 5-1: USB disconnect, device number 3 [ 1372.314490][ T9987] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1372.564477][ T9987] usb 5-1: Using ep0 maxpacket: 8 [ 1372.684525][ T9987] usb 5-1: config 4 has too many interfaces: 175, using maximum allowed: 32 [ 1372.693220][ T9987] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1372.703289][ T9987] usb 5-1: config 4 has 1 interface, different from the descriptor's value: 175 [ 1372.712357][ T9987] usb 5-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 23:06:43 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d2406"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003020037000203be41b0072d801e15a005002ef71f7a3a"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 23:06:43 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0xe000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:43 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x7f00, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:43 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0xe0, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:43 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x2, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:43 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'U+', 0x4}, 0x16, 0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x22, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:43 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x10000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1372.900980][T27471] xt_ct_set_helper: 13 callbacks suppressed [ 1372.900984][T27471] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1372.915162][ T9987] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1372.924190][ T9987] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.932472][ T9987] usb 5-1: Product: syz [ 1372.936807][ T9987] usb 5-1: Manufacturer: syz 23:06:43 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x10010000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:43 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x11000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1372.951628][T27481] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1372.964551][ T9987] usb 5-1: can't set config #4, error -71 [ 1372.971042][ T9987] usb 5-1: USB disconnect, device number 4 [ 1372.983061][T27488] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1372.992807][T27488] xt_CT: You must specify a L4 protocol and not use inversions on it 23:06:43 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x12000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:43 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0xe2, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:43 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x1f000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1373.013188][T27496] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1373.038923][T27504] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1373.048949][T27504] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1373.082364][T27512] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1373.091920][T27512] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1373.344484][ T9987] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1373.584496][ T9987] usb 5-1: Using ep0 maxpacket: 8 [ 1373.714519][ T9987] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1373.724626][ T9987] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1373.733487][ T9987] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1373.914586][ T9987] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1373.923626][ T9987] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.931660][ T9987] usb 5-1: Product: syz [ 1373.935857][ T9987] usb 5-1: Manufacturer: syz [ 1373.940429][ T9987] usb 5-1: SerialNumber: syz [ 1374.585514][ T9987] usb 5-1: USB disconnect, device number 5 [ 1375.334493][ T9987] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1375.574478][ T9987] usb 5-1: Using ep0 maxpacket: 8 [ 1375.704554][ T9987] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1375.714709][ T9987] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1375.723579][ T9987] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 23:06:46 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d2406"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 23:06:46 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0xce00, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:46 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x80000, 0x0) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000040)=0x4) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x22, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:46 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x20000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x3, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:46 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0x300, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) [ 1375.914510][ T9987] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1375.924200][ T9987] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1375.926107][T27537] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1375.932826][ T9987] usb 5-1: Product: syz [ 1375.947408][ T9987] usb 5-1: Manufacturer: syz 23:06:46 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x25000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:46 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x2e010000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:46 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x40000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:46 executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x22, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:46 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x48000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1375.964597][ T9987] usb 5-1: can't set config #1, error -71 [ 1375.971432][ T9987] usb 5-1: USB disconnect, device number 6 23:06:46 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x4c000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1376.324526][ T9987] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1376.564516][ T9987] usb 5-1: Using ep0 maxpacket: 8 [ 1376.684527][ T9987] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1376.694598][ T9987] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1376.703462][ T9987] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1376.874531][ T9987] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1376.883551][ T9987] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.892136][ T9987] usb 5-1: Product: syz [ 1376.896588][ T9987] usb 5-1: Manufacturer: syz [ 1376.901158][ T9987] usb 5-1: SerialNumber: syz [ 1377.545466][ T9987] usb 5-1: USB disconnect, device number 7 [ 1378.294464][ T9987] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1378.534487][ T9987] usb 5-1: Using ep0 maxpacket: 8 [ 1378.654540][ T9987] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1378.664613][ T9987] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1378.673442][ T9987] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 23:06:49 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x50020000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:49 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)={0x6c, r3, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2}}}}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000001980)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x69f1dc57b611b882}, 0xc, &(0x7f0000001940)={&(0x7f0000000580)={0x1378, r3, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6902bafe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffe0}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA={0xf8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2ec8bb54}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x64}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb46}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1046}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x135}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb7d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdc17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff801}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fff}]}, @TIPC_NLA_NODE={0x10bc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "4ccdeae551a0c5b1335f670843a40b68b884b9013961165b05a51338f276f2279def125d"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "7c3270f19666f67064c1df91b316eea7ec797f112b0c40"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_NODE={0x78, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x5b, 0x3, "6c5368a5e285196929c6d929adfceb8e8234bbba1d90dd9fe0600878def19e94fa2c4522fe99de1f84b90ecd09b550a721da71012324f882d6bfa16e2a6d48eea65acff96308d6539bb320b0561dc2106b1d75a2d3541a"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800004}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}]}, 0x1378}}, 0x80) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200000, 0x0) write$tun(r5, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @x25={0x3, 0x3f, 0xfd, "ab08f7e1cc5e44e4f8a9c002cccaf6c5"}}, 0x1d) 23:06:49 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x4, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:49 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0x1100, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:49 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0xe000, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) [ 1378.844550][ T9987] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1378.853613][ T9987] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.862144][ T9987] usb 5-1: Product: syz [ 1378.866554][ T9987] usb 5-1: Manufacturer: syz [ 1378.871139][ T9987] usb 5-1: SerialNumber: syz 23:06:49 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d2406"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp\x00') preadv(r1, &(0x7f0000000500), 0x0, 0x7fffefff) ioctl$TCSETSF(r1, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) r2 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f0000000180)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e20, @rand_addr=0x64010101}, {0x2, 0x4e23, @private=0xa010102}, 0x40, 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000)='veth0_to_hsr\x00', 0x4a, 0x0, 0x2}) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r3, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) write$UHID_INPUT(r3, &(0x7f0000000380)={0x8, {"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", 0x1000}}, 0x1006) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000100)={0x20, 0xfffffffffffffff5, 0x7, {0x0, 0x8}}, 0x20) 23:06:49 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x52020000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1378.929918][ T9987] usb 5-1: can't set config #1, error -71 [ 1378.932944][T27602] xt_ct_set_helper: 3 callbacks suppressed [ 1378.932948][T27602] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1378.948861][ T9987] usb 5-1: USB disconnect, device number 8 [ 1378.961608][T27604] xt_CT: You must specify a L4 protocol and not use inversions on it 23:06:49 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x60000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:49 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x68000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:49 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x6affffff], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1378.983503][T27613] tipc: Enabling of bearer rejected, already enabled [ 1379.003744][T27622] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1379.013480][T27622] xt_CT: You must specify a L4 protocol and not use inversions on it 23:06:49 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x6c000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:49 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0xe200, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:49 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x74000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1379.050937][T27642] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1379.071324][T27647] xt_CT: You must specify a L4 protocol and not use inversions on it 23:06:50 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/277], 0xec) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/keycreate\x00') ioctl$TCSETXW(r1, 0x5435, &(0x7f0000000040)={0x0, 0x2, [0x3, 0x0, 0xd05, 0xaee5, 0x7], 0x8}) 23:06:50 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0x4000, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:50 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x11, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:50 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x7a000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1379.110327][T27654] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1379.140764][T27664] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1379.314468][ T9987] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1379.554466][ T9987] usb 5-1: Using ep0 maxpacket: 8 [ 1379.674510][ T9987] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1379.684628][ T9987] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1379.693509][ T9987] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1379.864553][ T9987] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1379.873583][ T9987] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.882157][ T9987] usb 5-1: Product: syz [ 1379.886588][ T9987] usb 5-1: Manufacturer: syz [ 1379.891158][ T9987] usb 5-1: SerialNumber: syz 23:06:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe2}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:53 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x7ffffffe], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:53 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0xce, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:53 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x22, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r2, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r2, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) write$tun(r2, &(0x7f0000000340)={@val={0x0, 0x884c}, @val={0x3, 0x1, 0x60c3, 0xfff, 0x4}, @ipv4=@gre={{0xc, 0x4, 0x3, 0x1b, 0x120a, 0x65, 0x0, 0x2, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@noop, @end, @lsrr={0x83, 0x13, 0x89, [@empty, @rand_addr=0x64010102, @remote, @remote]}, @ssrr={0x89, 0x7, 0xff, [@remote]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x80, 0x1, [], "bb123ec1f985d4afe8b90818fd12428c2f906130d8e3d67b28f1e05208f52480ffd290d1ad97229f6194b405d42dd4be7d75e9c8724114b0b69c1f746d00fbe90291f428e82bced9f799cdb6bf8a4ca88b676fbfc0270a0f4ac4e7ef5cd87d605bd6293c31137df1ff0fd21ab84824c977f50ddac3697f22da87cb004f203a94"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x77, 0x80], "ea1644c53603f48621a112b5fdd0ededadd029ca64bf964cd2762745888c3c648ecd1da5bf6016a8d3c1f42a8a904b33c8689fde9dfcf9d326054883b80cdfffa64a03d452601077504f9813d80a0f6fca244c1d50908f84ec0a0e6e82fb3332617c8f8d2d81ab14f4ec63ea4933559854623e3127c5887e972925c7a7625f54f709879208f2017519c39c673dfcfc974d396e7b863c9d0d2a06c43c6b0a4a58bbff85e9df15e5fc8d87f2f6bcf38197765766d63e7503d125cefedb609c5b2441945e30a73c0e9ec87693"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "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"}, {0x8, 0x88be, 0x3, {{0xe, 0x1, 0x80, 0x1, 0x0, 0x1, 0x4}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x4, {{0x4, 0x2, 0x39, 0x1, 0x1, 0x3, 0x3, 0x40}, 0x2, {0x1, 0x9, 0x1, 0x9, 0x1, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x4, "bb5eebc011349e34ac358101d1b180a1111ff1e8b7d944635dac445014be6c57588b274fb1baaafd3e211bdb41dc4c6e4333047fce350af4e434ffdd5b35836ce2138863aded14"}}}}, 0x1218) 23:06:53 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0x7f00, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) [ 1382.130723][ T9987] usb 5-1: USB disconnect, device number 9 23:06:53 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x9e010000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:53 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0xd2020000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:53 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0xee000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1382.171046][T27689] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1382.197133][T27696] xt_CT: You must specify a L4 protocol and not use inversions on it 23:06:53 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0xfe000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xf8}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:53 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0xfeffff7f], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:53 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0xffffff6a], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:53 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:53 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0xe0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:53 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0xce00, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:53 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r1, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r1, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x5}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x22, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:53 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x2], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:53 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x3], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:53 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x4], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:53 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x5], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:53 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x6], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:53 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x7], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:53 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0xe2, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:53 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x1b) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) capget(&(0x7f0000000000)={0x19980330, r2}, &(0x7f0000000040)={0x1, 0x1, 0x2, 0x0, 0x4, 0x7}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xec) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x1ff) 23:06:53 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0xe000, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:53 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x8], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:53 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x9], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:53 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0xa], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:53 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0xb], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0, 0x2}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:53 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0xc], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:53 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0xd], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:53 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:53 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xec) 23:06:53 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0xe], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:53 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x10], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:53 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0xe200, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:53 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x11], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:53 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x12], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0, 0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:53 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x25], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:53 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0x2, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:53 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x48], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:53 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x4c], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:53 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0x1000000, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:54 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f00000007c0)={@val={0x0, 0x1a}, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x76, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x16, 0x4, 0x1, 0x0, 0x4, 0x68, 0x4, 0x1, 0x21, 0xa2b6, @rand_addr=0x64010102, @rand_addr=0x64010102, {[@timestamp={0x44, 0x8, 0xb0, 0x0, 0xf, [0x9]}, @timestamp_addr={0x44, 0xc, 0x22, 0x1, 0x1, [{@remote, 0xbe}]}, @lsrr={0x83, 0x27, 0xc6, [@broadcast, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x39}, @remote, @loopback, @remote, @remote, @empty, @multicast2]}, @rr={0x7, 0x7, 0xee, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}, "70ac"}}}}, 0x84) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r2, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r2, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) sendmsg$xdp(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x84}, 0x4000010) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r3, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) pwritev(r3, &(0x7f0000000100)=[{&(0x7f0000000680)="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", 0x12c}, {&(0x7f0000000540)="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", 0x113}, {&(0x7f0000000440)="e417b87eac27134036dcea43160db88b2b7d4379ebd0574a8b6443b2401064a3ce637eea38befcfc48806aaa3ba40d59ebf7a04d7e1a9f85bd78b9225aba9e604aa160090adaacc1c2e8634b21d4c90b8792956ef931909475b002379731c5997c5512def2eb77f0df033dc95f88a972aba1d429cd8a9c4ed45bdf5c1710ac45ecbceb67fb4dcd35c75a87bc7946d0d8f2b0b60f9ba42aceb1e982e62926aaf554e737fd4c56f672d1884ab35def9be1bfda5d6f201b43aced72c45022581b96ab5083bff5e544fedd538157f78584b4f5ae82b6a5e329f7e594450f6b103889ab17fa3c78", 0xe5}], 0x3, 0x800) 23:06:54 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x60], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0, 0x4}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:54 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0x3, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:54 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0x2000000, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:54 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x68], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:54 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x6c], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:54 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x74], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:54 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x7a], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:54 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0xee], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0, 0x11}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:54 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0xfe], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:54 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000e0000000450000e2000000000002907800000000e0000001220090780000000050a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e7666074919be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"], 0xec) 23:06:54 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x110], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:54 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0x4, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:54 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0x3000000, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:54 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x12e], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:54 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x19e], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:54 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x250], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0, 0xce}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:54 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x252], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:54 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x2d2], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:54 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x300], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:54 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x500], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:54 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000e0000000450000e2000000000002907800000000e0000001220090780000000050a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1356d16bb040500b27cd4b6d6c9957129035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766403ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"], 0xec) 23:06:54 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x600], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:54 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0x11, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:54 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0x4000000, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:54 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d2406"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0xffff, 0xffffffffffffffff}, 0x8) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000100)={0x3, r1}, 0x8) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000039542f108c07021047e6000000010902240001000000000904db00010a04c80009210300000000810009050a"], 0x0) syz_usb_control_io$printer(r2, &(0x7f00000001c0)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="000083"], 0x0}, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000039542f108c07021047e6000000010902240001000000000904db00010a04c80009210300000000810009050a"], 0x0) syz_usb_control_io$printer(r3, &(0x7f00000001c0)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="000083"], 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) 23:06:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:54 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x700], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:54 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x900], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:54 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0xa00], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:54 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0xb00], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:54 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0xc00], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:54 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0xd00], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0, 0xe2}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:54 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0xe00], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:54 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0xce, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:54 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0x11000000, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) [ 1383.953106][T28075] xt_ct_set_helper: 49 callbacks suppressed [ 1383.953111][T28075] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1383.994515][ T8218] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1384.244455][ T8218] usb 5-1: Using ep0 maxpacket: 8 [ 1384.364492][ T8218] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1384.374567][ T8218] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1384.383431][ T8218] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1384.554507][ T8218] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1384.563578][ T8218] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.572091][ T8218] usb 5-1: Product: syz [ 1384.576519][ T8218] usb 5-1: Manufacturer: syz [ 1384.581089][ T8218] usb 5-1: SerialNumber: syz [ 1385.164895][T28020] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1385.172662][T28020] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1385.185403][ T8218] usb 5-1: USB disconnect, device number 10 [ 1385.944502][T10270] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1386.184471][T10270] usb 5-1: Using ep0 maxpacket: 8 [ 1386.304502][T10270] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1386.314600][T10270] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1386.323444][T10270] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1386.494499][T10270] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1386.503531][T10270] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.512124][T10270] usb 5-1: Product: syz [ 1386.516583][T10270] usb 5-1: Manufacturer: syz [ 1386.521189][T10270] usb 5-1: SerialNumber: syz 23:06:57 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020400082505a1a440000102030109025c0002010000000904327a78f14b887e35736f16d03c4da2ea7f23e3beca74b453ed7dd71ebfae3eec64329cd600000000000000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 23:06:57 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x1001], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:57 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0, 0x300}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:57 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0xe0, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:57 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r2, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r2, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name, 0x10) recvfrom$packet(r3, &(0x7f0000000240)=""/152, 0x98, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100c2800000000000000000000000037515fa2c1ec28656aaa79bb94b44fe000000bc00020005000000140000270400117c22ebc20521400000d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd2000175e63fb8d38a8700"/252, 0xfc) dup3(r4, r3, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c000000838812fa48a9fe4ef1814ffbdd73b86304e049eeb801c14409b1fcb8bcf7d6033ff8ae8eb4d2c864f26946a622c0fa937526e3034883874f533e42a178788145567ca35bec8a69e638dcf10d7b4c2499631460573861eabe1e4fe3eaa31f5f8facc84d20d3fd205d70bf69e3fc39d62101f58e116408a65cfffb6f7bbd37b9f4b4ec718f71343c243203e44e6f784ee560edc7854286e1dc644ec68f53f2463e261537fd5d44aa18efa94756c19366b82e64b02c566834219b96e4f9cb64bd0c5d0122e9f8a4a2bce4b5fa", @ANYRES16=r5, @ANYBLOB="00022abd7000fcdbdf250a000000080001007063690011000200303030303a30303a31302e30000000000800030003000000080001007063690011000200303030303a30303a31302e30000000000800030000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x15}, 0x40) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)={0xc8, r5, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}]}, 0xc8}, 0x1, 0x0, 0x0, 0xc051}, 0x40) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x22, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:57 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0x40000000, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:06:57 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x1100], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1386.731161][T28097] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1386.742262][T28101] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1386.751594][T10270] usb 5-1: USB disconnect, device number 11 [ 1386.773189][T28110] xt_CT: You must specify a L4 protocol and not use inversions on it 23:06:57 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x1200], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:57 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x1f00], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1386.775642][T28107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34947 sclass=netlink_route_socket pid=28107 comm=syz-executor.1 [ 1386.797083][T28114] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1386.814270][T28119] xt_CT: You must specify a L4 protocol and not use inversions on it 23:06:57 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x2000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:06:57 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x2500], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1386.823986][T28119] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1386.848324][T28124] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1386.862789][T28124] xt_CT: You must specify a L4 protocol and not use inversions on it 23:06:57 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x2e01], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1386.888180][T28131] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1386.940066][T28141] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34947 sclass=netlink_route_socket pid=28141 comm=syz-executor.1 [ 1387.134488][T10270] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1387.374455][T10270] usb 5-1: Using ep0 maxpacket: 8 [ 1387.494538][T10270] usb 5-1: config 1 has an invalid interface number: 50 but max is 1 [ 1387.502633][T10270] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1387.513466][T10270] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1387.522644][T10270] usb 5-1: config 1 has no interface number 0 [ 1387.529085][T10270] usb 5-1: too many endpoints for config 1 interface 50 altsetting 122: 120, using maximum allowed: 30 [ 1387.540441][T10270] usb 5-1: config 1 interface 50 altsetting 122 has 0 endpoint descriptors, different from the interface descriptor's value: 120 [ 1387.554067][T10270] usb 5-1: config 1 interface 50 has no altsetting 0 [ 1387.714524][T10270] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1387.723554][T10270] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.732089][T10270] usb 5-1: Product: syz [ 1387.736521][T10270] usb 5-1: Manufacturer: syz [ 1387.741088][T10270] usb 5-1: SerialNumber: syz [ 1388.385531][T10270] usb 5-1: USB disconnect, device number 12 [ 1389.134442][T10270] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1389.374445][T10270] usb 5-1: Using ep0 maxpacket: 8 [ 1389.494465][T10270] usb 5-1: config 1 has an invalid interface number: 50 but max is 1 [ 1389.502538][T10270] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1389.513358][T10270] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1389.522552][T10270] usb 5-1: config 1 has no interface number 0 [ 1389.528983][T10270] usb 5-1: too many endpoints for config 1 interface 50 altsetting 122: 120, using maximum allowed: 30 [ 1389.540336][T10270] usb 5-1: config 1 interface 50 altsetting 122 has 0 endpoint descriptors, different from the interface descriptor's value: 120 [ 1389.554020][T10270] usb 5-1: config 1 interface 50 has no altsetting 0 23:07:00 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d2406"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00f3010000007c0203834372c744f45818ade3c62ac9692f069b1229d82dd5dfb114050d5cd31829d03a80ec989203f131a197ec97fb0c7d1fa8e600"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) 23:07:00 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x4000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:00 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0xe2, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:00 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0x7f000000, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:00 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0, 0x1100}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:00 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0xa8082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x400040, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x8010, r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x22, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) r3 = socket(0x9, 0xa, 0x2) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @rand_addr=0x64010102}, 0x2, 0x3, 0x0, 0x2}}, 0x2e) [ 1389.714544][T10270] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1389.723576][T10270] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.732222][T10270] usb 5-1: Product: syz [ 1389.746535][T10270] usb 5-1: Manufacturer: syz [ 1389.758439][T10270] usb 5-1: SerialNumber: syz 23:07:00 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x4800], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1389.781165][T28166] xt_ct_set_helper: 2 callbacks suppressed [ 1389.781168][T28166] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1389.784687][T28161] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1389.787859][T10270] usb 5-1: can't set config #1, error -71 [ 1389.813829][T10270] usb 5-1: USB disconnect, device number 13 23:07:00 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x4c00], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:00 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x5002], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1389.832376][T28172] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1389.832757][T28171] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1389.859659][T28178] xt_CT: You must specify a L4 protocol and not use inversions on it 23:07:00 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x5202], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:00 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0, 0x4000}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) [ 1389.889074][T28185] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1389.903514][T28185] xt_CT: You must specify a L4 protocol and not use inversions on it 23:07:00 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x6000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1389.935491][T28190] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1389.965374][T28201] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1389.980004][T28201] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1390.164488][T10270] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1390.404435][T10270] usb 5-1: Using ep0 maxpacket: 8 [ 1390.524490][T10270] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1390.534621][T10270] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1390.543494][T10270] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1390.724526][T10270] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1390.733576][T10270] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.742166][T10270] usb 5-1: Product: syz [ 1390.746608][T10270] usb 5-1: Manufacturer: syz [ 1390.751178][T10270] usb 5-1: SerialNumber: syz [ 1391.215464][T10270] usb 5-1: USB disconnect, device number 14 [ 1391.964436][T10270] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1392.204448][T10270] usb 5-1: Using ep0 maxpacket: 8 [ 1392.334500][T10270] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1392.344616][T10270] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1392.353460][T10270] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1392.524514][T10270] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1392.533537][T10270] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.541645][T10270] usb 5-1: Product: syz [ 1392.545824][T10270] usb 5-1: Manufacturer: syz [ 1392.550398][T10270] usb 5-1: SerialNumber: syz 23:07:03 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0x300, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:03 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0xce000000, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:03 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x6800], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:03 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000e0000000450000e2000000000002907800000000e0000001220090780000000050a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490cba1706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"], 0xec) 23:07:03 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d2406"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r1, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r1, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000000)=0x1) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 23:07:03 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0, 0x7f00}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:03 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x6c00], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:03 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x7400], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:03 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x7a00], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1392.797505][T10270] usb 5-1: USB disconnect, device number 15 23:07:03 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x9e01], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:03 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0xd202], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:03 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0xe0000000, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:03 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0x1100, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:03 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0xee00], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:03 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0, 0xce00}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:03 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x1e) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xec) [ 1393.154545][T10270] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1393.414445][T10270] usb 5-1: Using ep0 maxpacket: 8 [ 1393.534530][T10270] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1393.544645][T10270] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1393.553483][T10270] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1393.724509][T10270] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1393.733562][T10270] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.742139][T10270] usb 5-1: Product: syz [ 1393.746607][T10270] usb 5-1: Manufacturer: syz [ 1393.751178][T10270] usb 5-1: SerialNumber: syz [ 1394.395474][T10270] usb 5-1: USB disconnect, device number 16 [ 1395.144659][ T9993] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1395.384440][ T9993] usb 5-1: Using ep0 maxpacket: 8 [ 1395.504478][ T9993] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1395.514711][ T9993] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1395.523569][ T9993] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1395.694494][ T9993] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1395.703516][ T9993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.712089][ T9993] usb 5-1: Product: syz [ 1395.716589][ T9993] usb 5-1: Manufacturer: syz [ 1395.721162][ T9993] usb 5-1: SerialNumber: syz 23:07:06 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d2406"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r1, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r1, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)=0x80) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 23:07:06 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0xfe00], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:06 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0xe2000000, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:06 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0x4000, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:06 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x22, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) pipe(&(0x7f0000002d40)) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)={0x100, 0x0, 0x2, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_NAT={0xb8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x9c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x23}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={[], [], @multicast1}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, @CTA_EXPECT_HELP_NAME={0x5, 0x6, '\x00'}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'pptp\x00'}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x1}, 0x4000140) r2 = socket$unix(0x1, 0x2, 0x0) sendmmsg(r2, &(0x7f0000002cc0)=[{{&(0x7f0000000180)=@x25={0x9, @remote={[], 0x0}}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="15b42bf399b6f0624b8b404ec8141395e0a0ce374c1ff440d283a39258532020025d7ad0918baecd1b9664370cc38d0b7cd3e9097aa2edaf07bb5ba79708a5834848505b817b61c7a08f9e4a54e3fd34bf2ff11b7076f6c919", 0x59}, {&(0x7f0000000100)="bd2adae84bfba655bf158f791a156109eb9ff56bf4e0a6a55b82a4be569a9ad37faff855d2494f59829b2539edfd082fa69563", 0x33}], 0x3, &(0x7f0000001500)=[{0x50, 0x101, 0x8e, "7880c88c12c9700a799713f414d16e95be936b5c32ac556f06d054be36d26a9d93baa89c9105f12990848c95a8420f67896e4bfd89ddbde4304a"}, {0x98, 0x102, 0x101, "f1fc7721038a65edcfd27abd192715641bd6785e3c5b53d6c2f9d68bfce9df4b7a9d69286407605479e2d76497032509ba837a475837e40c635e5903b7c3176a481fe31d75350857c14b573dfa86cb153307498e4a06f933f18a3d8b0f17aed5b52a906aca430112a442342ee83cee09fd0f1cf35aa5eb36121ee346c341e1b7967ce1c9"}, {0x20, 0x84, 0xffffffc0, "42f0350831bddbe3d5cce67a"}, {0x90, 0x111, 0x10001, "5f903d6d239995b60cee2a4c1cdf3b5528b877ff5d3ab2857aff1c2415f1d173027029e3fc4d41edbe58da785e4ff48ebd534a57ffb6d8f9b84017dc4fa848e31afa71fc43f651cb424c00bf8d5df2da5a2493a180b6c72e7d8ef5fa119ade27871cc07b288cae1c5639f6e62ab59238a384164969891a4ab840"}, {0xf0, 0x117, 0x3, "b8730b92478b56f3b3b4fda5f1e2d532e6654c404ab7503820f743387c685e9318500723c3706e9953a4ab74ddce62d63fbd342673fdb4c030199f25e3d7c77f4b10c8973473378881b16550669b4ae2142f88bfed71687f9af4b34b25b4c3e692782dd78abdb44c5cbe472acab30194a8377d4bbb0f0ccc6c69ca9f71e049b964c7dada60c2f28d75f912581fe2d985bd7e1a1118d38eb9ea66341e525c77a7f079aa297b4418661948affb4eeabb248a510d567d3873f0d9683b948329472afda4115a9d7797b1772327f8dc6fccba4c9c78ecf17b39fdc8"}, {0x1010, 0x88, 0x7, "631b66891580bd2e18a007e44c8df2fcb896ee4debfbfb2428f737f0737b15de895189956d15973e4eefc5540c6abd653423cc18ec9cf5c3652f5f2ed3bcc423317095581d85f79073e5069feba09c41049ae474f8fe41737eee9ae889eba3d90b9ed13a0f1307dc98fb6fd4b05f968a65005dd73fe9d62a4728cb324d071eea0b3934caa063a65712a4286c87fdfcc14dbaa832e955b380928208ae8860be6a8495495a13c5a05a54dcfdef6168397d046bca8d358e879e548d4dcb1574c67b292e0b2e34a4207953019820b889a810260a44fc4455f0f241fa851822104b5e4f47b341a4adb54b106069a4058a351725456f91e92cc79d868819dcef53e25385da1bc855dc03122c40b65b2c431f202762378a9e0751313089c9ebe09acfe0bb117066ab3aef8ae17b418eef29530e97ca6865e5165d7b584961c19702bc89a781238ba6498ed01e89c201ae8983f2a0c0668f69b7631f1790a581c7774eb9983d91cb9eae9179170205e3511205ee914b4eb000e3c463e7446b498c236b29d1f157518bf3e77b1c2afdfe18b3545e35c3896dea97a7dfd47a03bb84d7052085bd2842858d01285d60e4deee4695e4de8249098b2c65c53d2ca37d3b7131d1b277a3530fe7f4d805f0d72fdf45fd86699b978ac928586c9e07c57fb331b67f9be3be9159039c1bbdf5fc1ac15a8e97195f547fae0e7754bdf1aa2308cd641077e837fd07e23e1fbc69619f9a6e6df36b5969d4b2bc11216588b75d4ca6ed489c6b7b9ea4e6b64c7f1b44ee7532a7255df38461401376830d0ac26b8c933baeac0e611adc083d5657c7151b0e347ba87a23ba2053634d160e7a58cc6e4936e70d07497b0f26e67cbf1f74f20fb974074f878b7cc69ad2ba714ef2785f66f18f3f1ae1bbc598211252ac9977b44a889f4d9d0943ed81b74cab7c59d1baddd785ceca1ba7f3e1281bc4da19ef5c201909ba69312140c6007f16f8496ec9911fa082b0bd591c9209fdc1ad0054dcd1fb96d2104fe23ce5113b01d0222537fd2f09c09e6537ee6f806a11c7734d7db0f304394316a8e70d842e9dc5a3857a7fc5132c62b968454e68cc31bae10b8b414a697b41756d8c8f8192ad0935761360ea972177879d79d2366423fda970e6f4b61453e068c0f394d9f847053467fec190f76d1034290ef65f87e477aec8f6c1aa61f31ba04a46a4a5c4de70a4056ff087008396eb10fd57767a57c4d685108d6a5e494592e78261581705880b558dde992f19c0ed37b7b625b435b2dce2a2b3758859a880c6d22313795bb36e307a70d430217029af8d7c51d5d66d7d075b3dcf77453459855f570040ab6a5ce167aad9b2474c35d0cfd24017811bdc9a80cf80b0ecd061be3de1f5f0422cf68c7847fbcd882961dad623612e66ffcf3bd98c5b64cc4a0b4fcf954f54e51482f72583d078c162859c35e835e28f81a491cb1063a496766c4595aa14a5f8d5371c7cbc13fce01f94845480688682843914bc11e75332b80150c5d23fd46ce87d5ca29d7451f81272c2c48faf96ed441ff5c18d58aa56c290e237864b1c788f9ab7955bd222492b19a82d85c3622e400f3e74dde3f35aec6b9dcd0e79db020f22232bfed606cac5e436cd38aed7334a7681883504f7229e212d4b2d3a32bff81e6875dd612296bbc25dcf0f796b4171cf7c64f5184f53db907d13db9260502f3aeb519124dd7f8eaf69ab46d3c05f205d6c9bdbb22939d2c8fb6ba28cb26574943b01725ebfcbce8c27565ef4489cdba4aad701e7486b916d4e5c8d6f0caabfd08918b012292ee8f2fe31f7b0132eff04de183e8c8be2f383c66336674bdad8ef6e23eab0e65453d088d79ea8d553f82a14ee7753e50c3002d16a66bc6957a5aa7111eb1aa7f297efefc0453d509bdf36fb0c95a2ad940eba59cf48be4d5c91c99a7587a0850d102ad531a0537cd7599a25f9e0c44e63be98a537af18706c63b7239f5e74046ae189e57003739cd9ac7f0918e1122ae63286d8cba630f5dd68b17542182c720857c83023aab41ea96ec1152a203e553e3706090175d458dbe5773f6cecf69ce53fec8dd48955ea2526b44a79bbf06e23117632ca045ed8486b75ea4a350acbe9270a80b29056c265425636ee77fab8674c945e4b6ad84ffc0b0c1e1aab3108b99441facbad63467a27c72bc7e828575e886d515532375c7e8be06b89f2f1d4d717c35399a34ee967b673703da39b9cb7b6110d69cd8eeb024985a25bea45db0e6e0ad9f5cc94236826e184fe6d50e7f2fee7bf850f9a22651ed75b7edd0d630f1aaaf041052a4dce012295aad82b36fb7955c08045464b520e7517e10cdda46df843ed26a0359bf5a677733586b2a6bd6c324fb7b0d8df85560822a78c330b3c59f54a677b3d1e3afd5d73029ac38334983affb76ec72dae43255770fc43888057df348ec5d70299eb24eb1c4fe0508850ddb99c4d6558f9484ae0494fc1ba340748436b79db9122bfecfd1f4f2c2d6a0b5555adecc216ba84abcc14509991742aa9646ec4d61ac1cc87711333fa85e4491154d55d0eb375b51219bdecc6a7e60ef2199829f2977cdbf77c463c1b2aa79f132ef52556b45dfcf274e29c63676a44de686c5d152bc7a6f35ca34332b06d7bbd676664d93ee239affa3410967ecfe4fd18b63623c82169fdf0990a68f05693e10d26a9510526be6f467f5bbf808acc022d5e291a99447c23648f35f1ead46fcaae53e2098c40a018895f4f2ea43ead5cf295f40074bfbb5215b7493ac719f7b3c49326c899af0497d2faa31fd0945f6d6b9f0aeb9e8649691e37344aa64619fd16e3a6364465510fc34a90544b3212364dbd10ea3e04785262c25c7aa8edbadf14ea9b6eb9f9d4342e164cc23485323b79ff620b6c847b99d6ed53a5d7c87b33aad9421db200390bf35d0acfe0c4d0d7e6de2b4833da2a008cd5ae5beab95d40bd1df6013a02f2c642b151070552b120c5bf4ce7bbf6b433e0ebdd55cbb3ffa229d345ad1236d3c40e08d54bec44ae768815caab5466aa6577e35c67f5073d36524aee92a15302d587e28bdf3f071ae67ab17492b9bc992fadea1bf776369cda6cfaed141ce2ca1f7f4ed4100058df48bf7be70572b3222416f6af3720a2266ce1022f1666939616d0f2c5ad4ae2c4e7f5c9bd74979ad29942ab25d91b4aea1feeb0e5563eadfc604b2a14d9b89f8a0623b719412cebddc4444afc3712b76462edfd96ef6f950d9bf9eff567b602e205478f27baa9b6574737c9dacff6ccbf32f2e8c68fb9b0a9d209d330db262ea7afc16fb144b69d242527433e5b5831a18a74344483417c240b49dc97688ff102a1ab36f98724faeef0e591de7e7211a706cdb18262a23fa2814731856ecaf55c6311eda95f6fdebe44d842025b303656034ce6237d200979c42363a9044e03f956ce7c3d850f7d4b7f1bc3feb686df1b49dca00729f0b5ae0e124a4d8262ba140447ca1018dbc3d627c3c281847e7c1646af245526e8ac631c59268d2e0604a03e231725f838d09086b0db5bb504ddc3d20e9e1ac29b560a18189d6ba663e84c177e17cb7f9abad061ef801bffad2869395a06c1a582cc0367249478a176bf1457f7e1fe0bae2ae723524329bd81aeb5a6986e58c16aad4d2a42dae9ab64563a2bd2fdd365160219c70a3d1ed721402cbe9368a5f6aa07ade86fb898898d6a67ef48841e8287bace87cda55640554ad1168b47a5b281f82f1d0732531203a44d200630bdeee71ed8786f9ad75c364528063d530a5b60a8eab2a1e212e31f000d3de2772e57574a0a0599d1be93beab43b673c47d778701438d306dcb040837ffe0082987c31fa5e88ffaefa01835625d3dd88c77224fae87e52f980e6dc92df29e5b79cfa98c9311daffb58e8235433af28911aac74c3ba518693bba9bbd1ec43d848330d47f3585b7023395e2dc00c2b8116b2be86164da4fafc4911c588d7028b4410c3459a4f1195dd3cb98449c2cf55927f8649e4541b81618f073a04696aa7056e2f05c3c4790d668b404f54e7628dcb8531212136364f21f16d677ac474f75aca9d1e188ccf1326cefaa41f2cd54edde748d189555c776c30d0d42374f19a6b3014e68d84066e6e1014adfc3d64008cdc0769e90f1e24c9f75fe8bdef4ea76ee98c1f984ce11f5e03e6a14c18b827126fb6fd37c5553e131394e85c04cefec6c4ca17276f1291e0eeb3d15af3ecd928b8c2a02c22630c0805d6a0e91c66f2b82ece7010df35f2732f33ea320303f847ff7efb30557343ea9badd862f9a096ec697b94497bac1db68f1417ad868a0dd8bac21892d43970250b6f89df1050983228407ab388c9d1230490f986ed4204d0968f4e0bcc14a40eb02d19de4da4f0d7f2030342fccf19371cef4516318a5488b197e476655602d410e18ec4265f440a837eecce37453e40e1ec4fee1e5a15636522c9ee4eff085aa0e656a5549c435ebe922b800b8a80aa0818ebbf7dee788fe746bfcb6028341cf8c65a11aeea83ddc32d779b758fc206a77973eb79c87521ce543c9a66c3dca8e69cbd57bb1d3078fa98329a10323f937718e9857d6d836911fcd9aa194f95b7221efe162d044fe4f797349db3b96ca97dc94af379803c236dd4c90ebbf95423915133eb15d13b7b3d64e3abd0af106fc3c7889cae60dcdec3e1fba8825eb2ea76cfa797ab971ca654eccc672bc3e87a269eb5afa2fdd96fb45d3b5321dbb35209e133d8a0c309a1cb3f488f296c000ce6d3815d7d76461b7466d6cd947352d4d0c8c1315a19c28795f98b3cc1e5794c323eb18affb77606c909852a6332417762a77526f0a9ae3626aabd08ffd4dc450425202964ba3ec2d508868f9b8cec0fb1321d551a24f3d6befd0a84346d9ebf5d482b41743cb6090ee45eadc1c4a1b3640ee4486071234fceec6cb95989fa9b938aabea2cf9eb17b1dc1187f697ae60644b3c6e7717c8b38e087a6db087bda5dbd01b2b8a2d911bec618033abd873540956773a4220ef25bf7d7d15efdb57580a429d5ca34ce39b222a9ca8f11ec223f4ac239d6b9d27a1a8eb096acb143fa19e481aab7484bfc5690518feda27dbee50c777d20695a5f83e246e1a99245ee295e41336dca91af910b67fae027d469baabf467afe0462bf9718b04279a239d1f8f87647bb67e28d59ae9c5f76420a84abbc0dd1db87e99e4733cd1df4345546185c2e5278f57a44b574b6791da3d38c622e037dde559230c5e84b734ea4b408ff06484edf6eadb56e93637fda4741afa0dc1c4190b8373977ebb295f2f00583afb3fcf2a275d4886288caabb851d49b71fa2000867058a9b9ed5c2d127741a6895ffaba5cef97b00a4dc3ea95e494b67c35e1ba161dfb543963fcf5b36ddf1add7d41f0f2c752bd79ec07d3e9cc743de4c79a4879d3b5ee2354c4bceb20a2393cee2190faef0649ae729522aa60db61c08c6e37afb469b75c9d92cca836d149b79bbaf15242c913dd07332a13ed47f033c9df39081814586e0452405d12dd1a63334be4dbdae336a182c132913c8ca0a1908021eec80e477a2615b8236ebc2113516bb0cfa4f79deb8296fee9a7965f274c34df2572a735840df3dfe52da0ca6fe37b70f4147116979cb5efe6a18994d1b037a258a1f643aee9c03555538373ee62670c0906cef0430d1625c83477682b14eaed9c40ac0b331f91ca8084a6e8c0a22394cab5333db2306cf7aa0e76f2e896a514df40c646bd14c2084824a3f1fea77755e6dc170a489811beba65214329b1c5a"}, {0xa0, 0x1, 0x3412, "0a1c74264fb67ba44dcbb4489911674795c98a8c3a2945218e045aa5806a731dbb7f85540d05618dcd13e951b9adaa03ec60d12417878914a1d12f56b354232c1267275fbb336730abd535f1f46d1c686c0b782038c8c21aaed8c56d0de2af8bc3bf4a69e9d674c9314efefff4d1ce89b33625675ad25c259ad2013488a3c434a731178307bb7fbf3a"}], 0x1338}}, {{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002840)="9a65e798556d4082f57ef2f922083728d4807f30a4b3f4fe24b3936875fd82f2fec343293e2a51624001b0a6a1d8a8fc4596753e30695617fe998af7e64010906c42ff1ea5ce60925fda3bb9c6e07760920e584838cf624da2084ac4f89d444de0ae9181e2e059ee60b2e04becfe8c10716b4682836ae69aa64826dc3327fda11f8a128379b0eb5451661ef2286302a667f23a9884083bcd225f3862a4f0e82ed2385de0650a509ba15d294ac74266857e22fc8c464fef26", 0xb8}, {&(0x7f0000002900)="6df79991a09dd1990462be9d68b47b79884014873bfe817cb96984d2b0eb6dd97ed22429eb766f3ebb90055ea04ef5fbd26b13904a8a38c85b51f897a2cf573b10d5b38cdf612838b299c88e9cc4e33f9192a462c9ec59b3a44789d759ae08a805c2ec125031d79e6cb0892a97608036c954370fb808b9cf3d78b808098caff04b1f07cb1cc09288cd68a4c196f73c97dcd2f2e60fc824514066b638da5dbed9a5d25f2e93630d34e2679c0a50eaa65d9ffc30db2b73516f21edd1e489c0c20e649263813d5e1f450b8c431d1893c3f02e26a2b308c358d6bed7ad8b0e5b20e1", 0xe0}, {&(0x7f0000002a00)="918b10b9402ea4e8740c1a42e4baade410d2a54797caa1d5aeda1cbd49cf9cdb7402a1d9481eecb8698c91a0a7beb378161babb946bf54193a42b68030c221517ccfd0c80c09f492c9f33fefc77eff3c9847a7f5f592c89667ec6e62df4c8b18be9337ea0aed73d982ab44a08791c32ad7b9f2c84f986dcc30be479a193085ffc1ca36f7d1d3dc104bf20887cd1613a59b9e14f021085587", 0x98}, {&(0x7f0000002ac0)="ae7e35be2506986b3fdf37984a142ea45eb024d4c3cb00c4f1aa0cd5242380d1b7a06b9867aa8174b0bda7ada7382d5950b8fbae09880313e33dd9955c9b2e047e0fd29d7f23d9eeb77aad4c3e34258b7168b03c3b60c6d4d35e7574e35b1cb11ebad76f3632204ac2777b8d373febe996daa79f52f8249a690178fe063616156407dd57f232f18136c979aafbc40f8cfd0936ce28ebe66de85bcc88d2520fd5b77cdbe5b11935a5be3dc0703f6d8ca9d573582523f7e4c20b619012305feb5377526c6fe86b6a80", 0xc8}, {&(0x7f0000002bc0)="9c1931094a97aca68ff29e3db53476513d6200cc3e250e7e2b55cb758a8ccdb2570b35e53ac0225a450d3ac04cb3b13a58aec0365fe106a03b3d90110d53abb20eb4274ce9c381e9494e7090d1349b302f2fede385df6f86d860", 0x5a}], 0x5}}], 0x2, 0x20000440) 23:07:06 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0, 0xe000}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:06 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x40000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1395.805478][ T9993] usb 5-1: USB disconnect, device number 17 [ 1395.831185][T28313] xt_ct_set_helper: 8 callbacks suppressed [ 1395.831195][T28313] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1395.833775][T28310] xt_CT: You must specify a L4 protocol and not use inversions on it 23:07:06 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x1000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:06 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x2000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:06 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x3000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:06 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0xffffff7f, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) [ 1395.862171][T28318] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=28318 comm=syz-executor.1 [ 1395.871228][T28321] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1395.897488][T28326] xt_CT: You must specify a L4 protocol and not use inversions on it 23:07:06 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0x7f00, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) [ 1395.935451][T28340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=28340 comm=syz-executor.1 [ 1395.941016][T28336] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1396.224429][ T9993] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1396.464434][ T9993] usb 5-1: Using ep0 maxpacket: 8 [ 1396.584496][ T9993] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1396.594593][ T9993] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1396.603423][ T9993] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1396.774480][ T9993] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1396.783549][ T9993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.791813][ T9993] usb 5-1: Product: syz [ 1396.795999][ T9993] usb 5-1: Manufacturer: syz [ 1396.800583][ T9993] usb 5-1: SerialNumber: syz [ 1397.435562][ T9993] usb 5-1: USB disconnect, device number 18 [ 1398.194426][T10270] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1398.434407][T10270] usb 5-1: Using ep0 maxpacket: 8 [ 1398.554490][T10270] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1398.564577][T10270] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1398.573428][T10270] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1398.744519][T10270] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1398.753565][T10270] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1398.761593][T10270] usb 5-1: Product: syz [ 1398.765836][T10270] usb 5-1: Manufacturer: syz [ 1398.770482][T10270] usb 5-1: SerialNumber: syz 23:07:09 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r0, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r0, 0x5453, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x72, 0x4, &(0x7f0000000680)=[{&(0x7f0000000100)="42d275aa850308b9cb0d7195f5c22ae0d7f20b112866cc104ecf97d3f7586dd46e84714953159083130b0425970a0a524f896fafe379ecbc2f5c0ae80104ff2d908f1fdf22eff8b7a21872cea9c25bd7e58f8e5a61c756dab6eac3eb55a6b11550e2c958961a49575c79bbf3bcaea969c3e1e3c1814ce84b66cba32b81586dcf2ed4177cf57e6a67c307f48ee8b54615323a4eb1db", 0x95, 0x71de}, {&(0x7f0000000480)="367c664aea3b34e74808e58e8190c16a2ca6e7350223a030ceaefa88455e8e202278f4a0f533ca7e72e57f12ec04f7d20ac6f8071296497879baeec28a3fbd11b9f799c2fcd1280049dd8a9e318fc6781319df844b1e5f61f901d4abfe1790b668b6adcf4910e15d4ffa760b053741c34d2b23e12f6985a93c5d0a04dd7d7f6767972b2d94f49223cfc04bb560299c37f78f6b57ac0a8568f0b15298c6f42c337f2705107b5771976f8889442d15f3c7f7366b350a32132a803458549d1b487617f45b921dd95f084e149fb14dff883dc50059449e1aa4410cc24d39280c", 0xde, 0x7}, {&(0x7f00000001c0)="9fcdf9112cf11a42183e34af577e92555e16444fccc4f4d9d6b132dadaac35f37d30a1d291ddc5ed1ec330724af8d19f223932426673643972b56eca5c78627d5231f6b8d89d0886326a6df0f5e59bb0fe31e7ce1eefd6ef4ccaccbe2c6cd09ee2777f4ead57b28e87", 0x69, 0xfffffffffffffe01}, {&(0x7f0000000580)="4f2514dab4cccff0d74313907e7bd879e6727ddff9e83d62495a8d1c2a9b6d796a08882de83a5a7fb79f7986d6f38114ebdf7a10abbf020e54fd67aa746b62eddf0380579495462f49f9b8007e44469c376ee6042f71a7ec7c2a266f9a040359ff86324cea29aa369a6de1f13912ebde37f2c94e17c8fb2068230584f9eaeaadd8e5e79709bad3f7c2374aad592e9eb84c10e7e444325e806c37666816555bfc561b14f31e4146cfc3cf36a0814e16b85dc19b6eb634ad96c169350efd4958e78c967c326c9e3313133ba28eeb", 0xcd, 0xffffffffffffa6fa}], 0x80082, &(0x7f0000000700)={[{@journal_async_commit='journal_async_commit'}, {@test_dummy_encryption='test_dummy_encryption'}, {@nouid32='nouid32'}, {@data_writeback='data=writeback'}], [{@dont_measure='dont_measure'}, {@subj_user={'subj_user', 0x3d, '\\\xfd)'}}]}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) r1 = syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000380)=ANY=[@ANYBLOB="9240e2ce71851b400fcc03c37797b2735eb5ed61a9e28cb0b0767a45848af7b465d47e345083395ef3a3b9a81d8011c5c526771696e6c6df28a97ad96897dae709bdff4bedfbebc4a772e641a29899551984efacaec3c293147c6a5437fdfd5b1e6a7eabf124ad5f2fd27b48500e55870aee0dfdec0bdfcfd26ca60f09fd1c50ab0956dd60c5d4eb21a5d896d0e035d6339dc4ccfd769382e0c82b79e919a54edc374f159a402a5f2ffab0f930b91985787b0a4de925d192f2d76f5a525c970db98eb6dc34223df3", @ANYBLOB="06a7e1858fec95d07f46d76e5abc34c00cdf341c931201289426983c"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000302020000c603e3c901a37b8925fc09b238e83c26bbccae7f87baaa04b045d4f8d51ff136d14a4faafc86f480c4af529afa56595b426feb25c8"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) 23:07:09 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0, 0xe200}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:09 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x4000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:09 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000000)=0x71) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x22, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:09 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000002}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:09 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0xce00, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:09 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x5000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1398.834448][T10270] usb 5-1: can't set config #1, error -71 [ 1398.842463][T10270] usb 5-1: USB disconnect, device number 19 [ 1398.868322][T28375] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1398.873553][T28372] xt_CT: You must specify a L4 protocol and not use inversions on it 23:07:09 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000003}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:09 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x6000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:09 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x3, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) [ 1398.939627][T28381] xt_CT: You must specify a L4 protocol and not use inversions on it 23:07:09 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x7000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:09 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x8000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1399.003017][T28397] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1399.035259][T28408] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1399.204414][T10270] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1399.474419][T10270] usb 5-1: device descriptor read/64, error 18 [ 1399.864447][T10270] usb 5-1: device descriptor read/64, error 18 [ 1400.134423][T10270] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1400.404429][T10270] usb 5-1: device descriptor read/64, error 18 [ 1400.794426][T10270] usb 5-1: device descriptor read/64, error 18 [ 1400.914514][T10270] usb usb5-port1: attempt power cycle [ 1401.624538][T10270] usb 5-1: new high-speed USB device number 22 using dummy_hcd 23:07:12 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r0, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r0, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d2406", @ANYRESDEC=r0], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000280)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) 23:07:12 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x9000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:12 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0xe000, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:12 executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)={0x6c, r1, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2}}}}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x38c73ff27e577efc}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)={0x640, r1, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x148, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000000}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "3ced2d5d6383fe4df0022f057ad6977799be8a0bdd2c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xa5, 0x3, "b44b2d4d132c0dfaa9892649264a9d28ceed013046ec1a1cb06b1ee2e298419c992d8f3b4693e637bc3bba1cb5f387857b584982b30488228c12661ca5d76cc8c0617f6365f5642d5022964781659aa06bc8283456cafa75265107a3b04a65aba43e1c0166b7414fcf8f78417f5793920bee4962b0e4bac5fdba8a64d32a243f15ce23560d39bf76b607956a2cae70c60c77c67f6bcff17c4463e19be0b09ef896"}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "eb5ae8de699f29c570baa933a033360591a8b7f48f32c03ef36ebc73954e2f86"}}, @TIPC_NLA_NODE_ID={0x4}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffff9}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x34e3}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8411}]}]}, @TIPC_NLA_NODE={0xb8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8ee}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "27c70b1471a95ec6eda716ee4504155b4013c88ef4e44006cd"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "c2529d819e227192bd4b48eceef3791d23661e61f041"}}, @TIPC_NLA_NODE_ID={0x18, 0x3, "746e69931d2bffb6c49a15329d431b80f8a99332"}]}, @TIPC_NLA_NODE={0x1c4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xbf, 0x3, "1bbe395f9e932fef09754569ef07db6bb11685fd98fd3c89b6cb8d92c89e090b789a7772f0ebe75c1b4a471d8ada7aa5aeb80e990ac1a723f929e28253031fc84867c2966e5ad7a993d57f04d73f5c2804cc3b2c474c99fd25dd494c805cc21c763b317c3120d5f77642721a0fc9a5e5b3e9ff705aa15ae2969bc592ab3f9c0e9b4de3d166a64e6f6151f8f8e667110b3ffffd2f5b7f1f993c0ac81580e6b28ef9cbd89b29cb71e1b99d40115f9e8bf55b3707f0df2c874782b76d"}, @TIPC_NLA_NODE_ID={0xf3, 0x3, "e0fb88f05032916efb460078b251c9c10f5c18a08e55e5a86fe8842177781146a778574c4748a6342f1498778cc6889b1c09d995418ef20c2e8b1981028ec05fe4d94474e2aa1d5ec75fe1b4411f308c0718223e073359b47a30ee9d8f3a127142be3cf2282ffdc8aa394a065ded3892f05d2e809ea5ff48e51f810f15d9c72594df562e4c687ade796dde30aba9a25e9000adce3fd3799d8dca3c168bf7a09232b7ef4874d1ea57d93bd0423d00d46430ef6c245637a2a027ef606bd2ea151ef61c1199e3bdfd7efc30e075875ba56dafbcf1b80c0a1e748f91c0bb50e1d169408f7fca674ad064a74a386e651993"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "d0c63c577c371044e65a95ca1cb44424e0115aac67475cd95bf12e339f1363294fe4"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA={0x12c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x37}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe9f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}]}, 0x640}, 0x1, 0x0, 0x0, 0x4004010}, 0x4000800) write$tun(0xffffffffffffffff, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x22, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:12 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x4, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:12 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe00001b4}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) [ 1401.794498][T10270] usb 5-1: device descriptor read/8, error -61 23:07:12 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0xa000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:12 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0xb000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1401.867960][T28430] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1401.870520][T28427] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1401.891306][T28434] tipc: Enabling of bearer rejected, already enabled [ 1401.905403][T28438] xt_CT: You must specify a L4 protocol and not use inversions on it 23:07:12 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0xc000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:12 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0xe200, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) [ 1401.934293][T28448] xt_CT: You must specify a L4 protocol and not use inversions on it 23:07:12 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x5, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:12 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) [ 1401.987408][T28456] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1401.989521][T28455] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1402.004570][T10270] usb 5-1: device descriptor read/8, error -71 [ 1402.494427][T10270] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1402.584496][T10270] usb 5-1: Using ep0 maxpacket: 8 [ 1402.704463][T10270] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1402.714582][T10270] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1402.723452][T10270] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1402.894454][T10270] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1402.903500][T10270] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.912037][T10270] usb 5-1: Product: syz [ 1402.916934][T10270] usb 5-1: Manufacturer: syz [ 1402.921507][T10270] usb 5-1: SerialNumber: syz [ 1403.565543][T10270] usb 5-1: USB disconnect, device number 23 [ 1404.314404][T26287] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1404.554432][T26287] usb 5-1: Using ep0 maxpacket: 8 [ 1404.674438][T26287] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1404.684517][T26287] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1404.693345][T26287] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 23:07:15 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) preadv(0xffffffffffffffff, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(0xffffffffffffffff, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="7201a960", @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf2503000000050005000100000005000300800000002c0001801400020067656e6576653100000000000000000014000200726f736530000000000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8004) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x78, r1, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000030}, 0x4081) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r2, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r2, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r3, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) accept$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x28a) 23:07:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0xd000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:15 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0x1000000, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:15 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:15 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x6, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:15 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d2406"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r1, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r1, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0406618, &(0x7f0000000000)={{0x2, 0x0, @descriptor="ed5f0d81949def2e"}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 23:07:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0xe000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1404.884519][T26287] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1404.897858][T28491] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1404.906721][T26287] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.915008][T26287] usb 5-1: Product: syz [ 1404.919858][T26287] usb 5-1: Manufacturer: syz 23:07:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x10000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x10010000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x11000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1404.939984][T28503] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1404.949795][T26287] usb 5-1: can't set config #1, error -71 [ 1404.958226][T26287] usb 5-1: USB disconnect, device number 24 [ 1404.972802][T28510] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1404.978512][T28509] xt_CT: You must specify a L4 protocol and not use inversions on it 23:07:15 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0x2000000, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x12000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:15 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') ioctl$HIDIOCGREPORT(r2, 0x400c4807, &(0x7f0000000380)={0x3, 0xffffffff, 0x3}) preadv(r2, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r2, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "39b8ffd5c529579833773a721fb97555a67ed92f23fc493ed5e06e58604b9dd59d0d594dca7821b1cbf02084027227cddce57dcf9f003fa31d3d5d2d9ab081d9993883f2418595fed7ecf374ea46e3d90a83a87c7161ea89e18a42f1ba5552f05c0c71fdd67f497917911548e2e825b0a8fe36ea9bbddd2f3b049baf31be1dfed02eda22c2160e69a7fefb35242fff04fa2326275bf9e837846600abb52cbc1d425a78b8602c2707965ba07dd56d265c863bbd4ca4df496c676158286baf6c492df11ee13ede48f7e71ffb8bb558be7b6b8a193dac806d3d2a2b3e35eedd0486593284ee418e4d5f989f68ccdf34afbd7b286c6b391c5975cc9d5d880bfa34e6"}) getpeername$unix(r2, &(0x7f0000000180), &(0x7f0000000100)=0x6e) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @broadcast}, @sco={0x1f, @fixed={[], 0x12}}, @in={0x2, 0x4e24, @multicast1}, 0xfffc, 0x0, 0x0, 0x0, 0x99, &(0x7f0000000000)='syz_tun\x00', 0x8, 0x8001, 0xffff}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000e0000000450000e2000000000002907800000000e0000001220090780000000050a69d92dde55e69af5013f93429e19b9de9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e1878ac46695bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b0"], 0xec) 23:07:15 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x1f000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:15 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:16 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0x3000000, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) [ 1405.334511][T26287] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1405.574442][T26287] usb 5-1: Using ep0 maxpacket: 8 [ 1405.694470][T26287] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1405.704544][T26287] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1405.713384][T26287] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1405.884472][T26287] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1405.893517][T26287] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.902239][T26287] usb 5-1: Product: syz [ 1405.906691][T26287] usb 5-1: Manufacturer: syz [ 1405.911260][T26287] usb 5-1: SerialNumber: syz [ 1406.494732][T28494] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1406.525350][T26287] usb 5-1: USB disconnect, device number 25 [ 1407.264398][T30126] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1407.504389][T30126] usb 5-1: Using ep0 maxpacket: 8 [ 1407.624452][T30126] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1407.634589][T30126] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1407.643423][T30126] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 23:07:18 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d2406"], 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x111800, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x50, r1, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x2080, 0x40) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0xbb8, 0x0, 0x5, 0x401, 0x0, 0x0, {0xc}, [{{0x254, 0x1, {{0x0, 0x3}, 0x58, 0x6, 0x1ff, 0xfff8, 0x13, 'syz0\x00', "8d073a607285d4697e26dcd87fba6af4a30f8bb1f436d119b4b9da0c469aefa3", "2c767629471f3264ffd7bad7fb86ea145bc41eccb83104a3eb0ce4761dadb9b0", [{0x7f, 0x0, {0x3, 0xfff}}, {0x8, 0x8, {0x0, 0x9b61}}, {0x6b, 0xb93f, {0x2, 0x200}}, {0x6, 0x81, {0x0, 0x5}}, {0x47, 0x38f, {0x1, 0x3}}, {0x7ff, 0x94e4, {0x2, 0x9}}, {0x9, 0x1, {0x2, 0x8}}, {0x8000, 0x6, {0x2, 0x81}}, {0x6, 0x3ff, {0x1, 0x5}}, {0x32c9, 0x9, {0x1, 0x5}}, {0xe, 0x59a2, {0x3}}, {0x9, 0x20, {0x3, 0xffff0000}}, {0x81, 0x604, {0x3, 0x4}}, {0x5, 0x6, {0x0, 0x450}}, {0x8, 0x0, {0x3, 0x7}}, {0xff, 0x8, {0x0, 0x100}}, {0x7, 0x4, {0x2, 0x4}}, {0x0, 0x101, {0x3, 0x7ff}}, {0x9, 0x2, {0x0, 0x8001}}, {0xffe0, 0x800, {0x1, 0x45c7}}, {0x9, 0x9628, {0x1, 0x7}}, {0x81, 0x3ff, {0x1, 0x1}}, {0x2, 0x543, {0x0, 0x6}}, {0x100, 0x99, {0x3, 0x8}}, {0x76e3, 0x0, {0x2, 0x1}}, {0x1, 0x3, {0x3, 0x8}}, {0x1d08, 0xff, {0x2, 0x1000}}, {0xffff, 0x7ff, {0x0, 0x6}}, {0x47c, 0xc670, {0x0, 0x200}}, {0xfff, 0xd4b0, {0x0, 0xffffffff}}, {0x0, 0x7, {0x1, 0x1}}, {0x4, 0x5, {0x1}}, {0x9, 0x8, {0x1, 0x3f}}, {0x5, 0xffff, {0x1, 0x8}}, {0x5, 0x8000, {0x2, 0x8000}}, {0x9, 0x3, {0x1, 0x6}}, {0x5, 0xabe9, {0x0, 0x80000000}}, {0x7, 0x0, {0x1, 0x8000}}, {0x1, 0x7, {0x1, 0xfde}}, {0x7ff, 0x431, {0x3, 0x2}}]}}}, {{0x254, 0x1, {{0x3, 0x400}, 0xfb, 0xc0, 0x8001, 0x7fff, 0x2, 'syz1\x00', "2baec3eda3125a4837eaaa05d3aab93ef6dd4f668e898b4f8fb1e3f7900faf80", "e1753872ae96995f2429929262210cece173e2dce57d6f5861c394f7a7f4f2c9", [{0x4, 0xfffc, {0x3, 0x2}}, {0xed7, 0x9, {0x2, 0x5a81}}, {0x800, 0x7, {0x0, 0x400}}, {0x80, 0x4, {0x1, 0x3}}, {0x1, 0x2f29, {0x1, 0xf2}}, {0xfff, 0xffe0, {0x9ae1075cf80fd821, 0xdf8}}, {0x1, 0x40}, {0x7, 0xb1, {0x1, 0x3ff}}, {0x4, 0x8, {0x2, 0x80000001}}, {0xc44, 0x6, {0x2}}, {0x4, 0xfffd, {0x1, 0x8525}}, {0x7, 0x5, {0x1, 0x2}}, {0xeb78, 0x7fff, {0x0, 0x3ff}}, {0x7, 0x34, {0x0, 0xfffffffc}}, {0x0, 0xffff, {0x2, 0x7fffffff}}, {0x4, 0xf6c4, {0x3, 0x3}}, {0x6, 0xfffa, {0x2, 0x40}}, {0xe6, 0x0, {0x2, 0xffff}}, {0x5, 0x7, {0x1, 0x800}}, {0x5, 0x1, {0x0, 0x99}}, {0x9, 0xd7, {0x3}}, {0x4, 0xfc01, {0x3, 0x8}}, {0x7f, 0x590, {0x3, 0x3}}, {0x7, 0x3, {0x1, 0x7}}, {0x101, 0x6c1, {0x2, 0x3}}, {0xc993, 0x8000, {0x3, 0x9}}, {0x1, 0x2, {0x2, 0x1932}}, {0x0, 0xf1b3, {0x2, 0x1}}, {0x499, 0x0, {0x0, 0xfffffff9}}, {0x8, 0x5c68, {0x1, 0x80}}, {0x401, 0x5d13, {0x2, 0x8000}}, {0x20, 0x7fff, {0x1, 0x8}}, {0x2, 0x1, {0x2, 0x1}}, {0x7f, 0x8, {0x3, 0x7}}, {0x8001, 0x14, {0x1, 0x41}}, {0x5f2, 0x5, {0x2, 0x1f}}, {0x3f, 0x1f, {0x0, 0x400}}, {0xe473, 0x0, {0x1, 0x8}}, {0x6, 0x0, {0x3, 0x716}}, {0x9, 0x2, {0x3, 0x7ff}}]}}}, {{0x254, 0x1, {{0x2, 0x1}, 0x50, 0xff, 0x200, 0x7, 0x800, 'syz0\x00', "d552e8279a07c9d10e486881ffc4d3226badb9cf6dd7c30aa866450aa05f700f", "3eef5cdfc3dfa5520253219ce25940c4232d9602745a432f07f475a11f0c09d5", [{0x8, 0x8001, {0x3, 0x2}}, {0x4, 0x100, {0x3, 0x3f}}, {0x3, 0x1ff, {0x2, 0x400}}, {0x7, 0x95, {0x2, 0x7}}, {0x0, 0xde8, {0x1, 0x4}}, {0x4, 0x1444, {0x2, 0x636}}, {0x7fff, 0x401, {0x1, 0x80}}, {0x5b, 0x1, {0x0, 0x2}}, {0x7b, 0x7fff, {0x1, 0x400}}, {0xb17, 0x0, {0x3, 0x3}}, {0x43, 0xbe, {0x0, 0x9}}, {0x6, 0x400, {0x0, 0x101}}, {0x5913, 0x6, {0x1, 0x9}}, {0xd90, 0x9}, {0xff, 0x1, {0x1, 0x7}}, {0x3, 0x6, {0x0, 0x4}}, {0x200, 0x7ff, {0x2, 0x30ac1019}}, {0x0, 0x6, {0x0, 0x3ff}}, {0x8, 0x8, {0x2, 0x1}}, {0x8d8, 0x0, {0x0, 0x2}}, {0x4, 0x2, {0x3, 0x7fff}}, {0x6, 0x4, {0x1, 0xffffffff}}, {0x6, 0x8, {0x3, 0xdd60}}, {0x200, 0x0, {0x2, 0xe5}}, {0x7e92, 0x7, {0x2}}, {0x793, 0x7bb, {0x0, 0x5}}, {0xffff, 0x0, {0x3, 0x7}}, {0xc08, 0x63, {0x0, 0x7fffffff}}, {0x9, 0xfbff, {0x2, 0x1}}, {0x1, 0x4}, {0x3ff, 0x4, {0x3, 0x101}}, {0x0, 0x2, {0x1, 0x4}}, {0x6, 0x9075, {0x2, 0x2}}, {0x8000, 0x1000, {0x1, 0xffffffff}}, {0x2, 0x1, {0x1, 0x1}}, {0x9, 0x1ff, {0x2, 0xffffffff}}, {0x5, 0x4, {0x2, 0x209}}, {0x2, 0x3ff, {0x2, 0x4}}, {0x5, 0x6, {0x3, 0x8}}, {0x7f, 0x2285, {0x1, 0x8}}]}}}, {{0x254, 0x1, {{0x0, 0x2}, 0x2, 0x8, 0x7f, 0x7fff, 0x14, 'syz1\x00', "ab07dcdc1b93b4f405b900911c8d1ef56625308cda30901fa012455b2d20de6c", "d2dc4181c1bf103595e28d458f95eb73805c9511d72f59dae4f2096251c2045e", [{0x20, 0x473, {0x1, 0x1}}, {0x1ff, 0x4, {0x1, 0x8}}, {0xd0d9, 0x8, {0x3, 0x10000}}, {0x0, 0xfff9, {0x2, 0x80000000}}, {0x5, 0x5, {0x2, 0x10000}}, {0x9, 0x3, {0x2, 0x3}}, {0x4, 0x5, {0x3, 0x2}}, {0x8, 0x7, {0x2, 0x30}}, {0x0, 0x1}, {0x9, 0x4dc, {0x0, 0x6}}, {0x1000, 0xfe01, {0x0, 0x6}}, {0x7f, 0x101, {0x0, 0x2}}, {0x7, 0x5, {0x2, 0xaf1}}, {0x4, 0x8b3, {0x1, 0xfffffffa}}, {0x5, 0x0, {0x2, 0x68}}, {0x5, 0x0, {0x0, 0x7}}, {0x173a, 0x8, {0x1, 0x3}}, {0x0, 0x100, {0x0, 0x2}}, {0x89f, 0x81, {0x1, 0x2}}, {0x7ff, 0x0, {0x2, 0x9}}, {0x9, 0x4, {0x0, 0x6}}, {0x100, 0x9, {0x3, 0x1}}, {0x1, 0xff, {0x0, 0x3}}, {0x8001, 0x9, {0x1, 0xffff}}, {0x0, 0x3, {0x1, 0x5}}, {0x3, 0x9, {0x0, 0x3}}, {0x3, 0x2, {0x2, 0x9}}, {0x4000, 0x8001, {0x3, 0x3}}, {0x8000, 0xfeff, {0x0, 0x6}}, {0x7ff, 0x7, {0x1, 0x40}}, {0xd1, 0x401, {0x3, 0x10001}}, {0xfff8, 0x0, {0x2, 0x401}}, {0xa7, 0x6, {0x2, 0xea0}}, {0x6, 0xc7, {0x2, 0x8}}, {0x5, 0x4, {0x2, 0x2}}, {0x7, 0xf0, {0x1, 0xfffffffb}}, {0x7ff, 0x7ff, {0x0, 0xb2}}, {0x3976, 0x200, {0x0, 0x8000}}, {0x7, 0xef78, {0x1, 0x3ff}}, {0x9, 0x1, {0x3, 0x6e}}]}}}, {{0x254, 0x1, {{0x3, 0xe1}, 0x8, 0x1, 0x0, 0x3, 0x22, 'syz0\x00', "5a130730c09e0d621de23df2ffbc5d4147ce32855e0515139639c8e0b4ecc5f2", "b2e206bd3c908e52f2a61d876132e7945e4cc2539c51df0198dd5491c528d7aa", [{0x3f, 0xfff, {0x2}}, {0x0, 0x1, {0x2, 0x9}}, {0x3, 0x101, {0x2, 0x7fff}}, {0x0, 0x7ff, {0x3, 0x20}}, {0x8001, 0x81, {0x3, 0x6}}, {0x101, 0x4, {0x3}}, {0x7ff, 0xe7c, {0x1, 0xc02}}, {0x2, 0x200, {0x1, 0x4}}, {0xb1, 0x401, {0x3, 0x4}}, {0xff8f, 0xb91f, {0x1, 0x5f}}, {0x20, 0x3, {0x1, 0x4}}, {0x50f5, 0x100, {0x1, 0x7c7}}, {0x8, 0x7, {0x2, 0x4}}, {0xa8, 0xfc3, {0x2, 0x3}}, {0x38, 0x80, {0x2, 0x80000001}}, {0x0, 0xfd, {0x3, 0x5}}, {0x4, 0x4, {0x1, 0x8001}}, {0x7f, 0x5, {0x2}}, {0xfe45, 0x3ff, {0x0, 0x7}}, {0x435, 0xbc7c, {0x3, 0x1000}}, {0x7, 0x7ff, {0x2, 0x3f}}, {0x473, 0x0, {0x1, 0x1ff}}, {0x9, 0x7fff, {0x0, 0x8}}, {0xff, 0x0, {0x2, 0x4}}, {0xff, 0x4, {0x1, 0x7fffffff}}, {0x2, 0x400, {0x0, 0x7f}}, {0x8001, 0x1ff, {0x1, 0x9}}, {0x5646, 0x3}, {0x8, 0x1, {0x3, 0xfff}}, {0x1, 0xf000, {0x1, 0x5}}, {0x9, 0x101, {0x0, 0x2}}, {0x3ff, 0x9, {0x3, 0x81}}, {0x4, 0x3f, {0x3, 0xffffffff}}, {0x8, 0x4, {0x3, 0x3}}, {0x35d, 0x8d, {0x1, 0x9}}, {0x9, 0x1, {0x16aeaf33bd98550c, 0x4949}}, {0x81, 0xbbd9, {0x3, 0x80000000}}, {0xfff9, 0xfc00, {0x1, 0x101}}, {0x6, 0x4, {0x724dbc30359fb376, 0x100}}, {0xfffb, 0x0, {0x3, 0x8001}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x4050}, 0x4000010) 23:07:18 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) [ 1407.814463][T30126] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1407.823538][T30126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.832085][T30126] usb 5-1: Product: syz [ 1407.836499][T30126] usb 5-1: Manufacturer: syz [ 1407.841068][T30126] usb 5-1: SerialNumber: syz 23:07:18 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x20000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:18 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x2, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:18 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0x4000000, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:18 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r2, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r2, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'virt_wifi0\x00', 0x8000}) write$tun(r0, &(0x7f0000000380)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv6=@gre_packet={0x1, 0x6, "2c0a95", 0x10ef, 0x2f, 0x1fe, @ipv4={[], [], @loopback}, @private2={0xfc, 0x2, [], 0x1}, {[@dstopts={0x8, 0x2, [], [@calipso={0x7, 0x10, {0x3, 0x2, 0x9f, 0x5, [0x2]}}]}, @fragment={0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x68}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x5b, 0x0, [], "ca388f24a670b65c714a4357ae94a3380f39b436b31f84de6e4d77751ae7f6a3615376ba9d37ff5395699794f6cb171df8be9691f20abe3c5fd531fc1f6f33161bcafce4e6468faa7cf18865d299990b082480001e6dcd538cdef3"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x7ff]}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x80, 0x699d, 0x8], "8e2ba407216c83f961e991dd25f2b828ad73508a5b4da4b30f5f1614466afd604f2915a40096c5350cc8b1f9defd0b3d97af64e18de9c194343b486fbdbdcaffb616cef1f26b3785f84df05c1c9b508ab1094eb1d36d73f2e2a557d12d679085d48333cdc552471114880399f846164ebf0d7425ef5bb0a722665a3565ab0e2c3b7088ae72df322cb01230013100ad8bcf535446582f607d5aeef93a14308fbecc74d17277a8244b26348f9307dab2cae1b96dd9752f52e991f1d9d709d162077a6847c346cb2557a26d6b86acf57cb15dd2714f1dcd96db66d1da95b12c6e2df52f1daaaae72f2718b681da0ee4fc728592fdcef6c75c54c73b8f960e655402d635cdc6f408fe704f7e266d761ba9ff7ab3557cb5afcfa5f4be2f08d4e0b07363b62f54bfd23c950257d791331a7c3ddcdc47f40c6f88d52ace29bf48ef955c1ff8a599850cc3781791955de745816fdd9d7a53fc05a92d9ad879fbf1c53ed36de3e2fedb99c9ff4766c6b95615b37ccf76ad50c91d8a09dc6bcc503a618d04a29d3362432d9cd04fc44924f22c2b2f49c2b39c45c002b83a7c968ed74435cd36a4ec2a4a6a64704766ea2d7f4555de29e02c7b63c95c9095b2c23ae3340d35915cb52f29888b1d2220157f48bf2dd352bdbff658e904359056a41ea631d4ebffd4478b371370f82fdd8b78cdb07f04968dc41476c20427e5ae4773e5cc205b48b78e1d3d2add781ec32076dc9d10d1f45e9ba0608d140695d07e44db446f36de6d3b4f42725f42f5b0d824ab8d4c5422a8957b1eeff1a7dc02ebfc73959db755ddf100daceb98140d66d05f6bd5bc68657e59cfc57e3a8afe61aba60a9960f9a82a59bc07ffe0a172cb69feda9edec46be6d3e4c7f4cd95f5d7b0d23547503a5e51aade78e5296d18e64ab4d469f24b4077fc14c04c1d10c983406e1bc2ce14518b4a6087c45fa062ad8b32927cfe7d68556bf97be5c47159e37189410cb29625cadf1cdaada7018994cba81fa83cc430682a48bda30ad847d567b2b56ec6844db6c32d68a15b447c158d51f53bca33e531b9fba9891cbe62918a0a85d6f4b7968003bbd9a0e2b5b75424f4e97960215b691034c90136e69f89b2a473ea58a393c22e16b85e4b67400572b3a58f5cc094fbc581dd94ec614cf45895119ba4184405340634d170a5d5dddf9e06f08234952ace7c7372380bdcf6c7c6a4ac032fc531ed9a4fbc83327d55390d60aa810c2f0fe5a4b8f24f3c947348a7f9e1c50a276122c1189154e3036efae289f9152e0edd9271d6f647d65fb4dad9ae2a2be1d5aa005ce0f7cd962a1f51b4b632c097fbf6bb0acb2aae0d37f26ca7868fb3dcab984315860bda4aedc578e2d488c9b9f0fad760e57b3b6dbe4e9861c0efe256a7769c5d128ab7f72cda148a85786362bf878b1f2d8435031dd502f1a5421f3472a7d660a1f08d832d05698e6fd3b982ba5e363051a2aa4de1daf26845ccd285fcae6ba8bd8ae368f7f78e3ea7411f848f8337acb70bb750d181ffd5d0e43f5a150dbf46c8ed17da3a048133ad01e50cf4855c9036875fdb9a4d1c2c501cb50dad870e912a4af4244dd45491a7b1bb59197f47f67b8015d03a61a2fd44541877efd4041cdaad21aa3a16cdf18cbf33ff938f2311c0230f2511b326344c557e630d1edb4f6d6f1a454d200446af6a9281602f69d5cb2b82cbf7c5c56c5e272c68c245b2b30abbdc20c891f1373665542fb37f8d0b1a5391c0229ea7be3a34b3280babd940561ee8545409037ccbb32b32dea39b5c993f9b717a6d48305d438cb4ee09e812e38d2497b09917a57ea3cf7789dea152467671e766ae8eba8b1279df5d896b00edf8b423d2ad830200728112ee26f7295bb8532b4e6faa43ad6dd56d4b42a0905e125023666ee3e5119b18248bcf0968cfd5ab7a7bc40f070a91c97b8cf8412631294d072fbf41f5a5c04e1066bdbbd7a2513193adf088d87c00555f2b37960054c6f755e5ad25487ca124ad63a565d1a1b71e6eae92abef9d20d777f4c78567f330d8d4f2f1413d34ce9a139dcb9b4eb1957ae74c14f6b8f2b28a57c35dc9a9825e5df01130d32616ef335b68a7fa6bb559f860a40149eb290b6f7b80e630959c7f46a52f1d8121a74f62c205ae1da0469de538093ed2b1a6f79500dcdef07c5466d5b590dc120e631deb88bb9914b33d818a5c8a1d309e2522706b1fdcf4375e10b15fbcef91633354cc6aca24fa508c296672727b0f43f1e2d938898a7419a403bf800552fa2fbc00c094e4c661de2483156e087960993720df9adc622fbb695d58c88fd5426eeac42483c9c33892d8eb672ee2221787b278463abed266795285ca298b3c3f20199b84e4e252e45d0c0c17d8e7d572f62cbbfb39bb22fc2eceb99158732fd658f1723dcc0d4157cbef431c63120f1da159f9cc379a9c6cb599a5b9c8cba0a69e6abe1b93d70b443539a83e8851c42e277a2f57132f6cc4c518d6f422777202c6aa6d0af30ab3f7f0c89b9468685551cd8725b26fd0d0ed7b0f50e322680d75821c3978f52036b4cba7d722dd8b564870259f86adce6e5c1f6f09b242fe8b5476f3794233da9cd81e8affe0e3ee549dcba7e68cd8069365506f747dba7b85e7daf72d15a7dc14d71d593f7539ed4d93477338c5ae9edcd9456b591ad607101edf3cf6a869698db46621db34cf770e8fdd815493721d34c4269b8d1f49dc653417fa439b3451b5fbb231b5b10889257fdc8dff08d03782e3326f5c3f8e37cbba848134e08708c48bbbf46a340d1c7226e0eabaedcab44e7798e53c5a3c225404c361980a32f546640f16cb4967b9547922aec00d36db7d1ba8fc30fe1425770caad8aedcbac8854e667c274592c523519fe771e4ffca801beb3191608759b992869c1139403b6c2f9f008a482f376eb66844a6914c52e9e03719f5d7441e6e8c5f5f68eaff55b8da0179576a565438668d8262f4d31a1b22748dd19510017f76450b0ab882762443bbee44ac76e94e379ec29c2de286dc912b742ef516060f4bf6655eb17147b38016d6f5a5a4f347be4401bd61b8366db51286e32ae1bf0871c3224dcf6d970785504ff20f81b4ebb9260ac37c14bed5cf9fb5e135b66b73552bdd5e83ed96996107b584ba37f79854f1a560dfbcf9287fe5095d22b3e26ee111a50f3eb78dfcd150744c5b3c6e49ebc74bb7d2c9156bcfb694d0e4c493e87492ce33b4ef89cfca17a51419e5f9987d3966d3e887edb4a40d101d7fb8b2ab7c4302254de241125c0b3e4e048296775aec806858c3dca821b944ca4313dfee0d2116504a7857972f29df588e39084c95f68ea68c1a6c1a8df2e86d89e1c8570f10ea8d65ff97121beb101239fd65533cfd6abd7a8963539f430cd17714846ec053c84b915e293b983902a70c807c4e7f7195ebfc8fefa3c2ef108948a42047ceb1cd53f14c551e7c401267d719364cc419b9af25d6010c67e4c4cdbc7b079cb6b053207b583995e318cf3b1b12f3fecad864930d22ba7feecc50d05ac158167791e85dca393abd9ea1b04e1c99b2723c627648815bec52136ced838637a19251d61ad6ec347f012df16c45e97dfa13c50281c703ec727cf22963d4a241a1a42d0e6e475ae14c6970a867441a9c3ae98c670dffeff220c8bb3137888a26e6ab3acc748aab5e1a30b738748e21fc684900abe1238725e563402b5add6cb3b014e76ea55b6154afaa710a1a2e005f0519e6f692cf8d208fa2fd4d8c80a983a707e9c91ea3fdb5f582e2afdd5500be734ac704fa6987e4480972b23ee9eb1aeef8adceda70db5248c9b54c468aef9cec96c54114b2370b5787830a11a787d888bc91df1462319bfa44b846397144a5c94f3b794c7112f224dac16747c45121223ff52027161454d64a86c5c206754e09065a895f4a15f0a6ffc02594eb3fdba234355eb035a6185371a2536eed153b136ac86ca996fbab0a3e90e3d2a20c44f15f3f925115a49a85d384b7be2e1ca9ea0695d26f3e045419cc5e79f59a080cfb2c0b21764ca76def02192f7d92c4e860c27276745743b0b9d9f74c096942c5e4ecdbcedf960310e5af7ae53f64b3565c2d4e4e328dd34f1953b7911799e6b2fa716cf91bd0a1de42dbbe3b9b8103400b01e46a316767da5e174c376a1078d09c706bed6544d1df8b6723420acd22f35774ff2c75668b376cc6bcada9d06ca7f3eba7bfde7ab1ce2d6372931c5ba4fd2bc5ba0c9c8eeb94ef9997c527a095c904999303c4edcf3c3dcd13c40e4444cd7fa1a18b0c23a603f8a939974f0aba9595c7b817dd40966b0f233fd29d6bf47628664def0dd60bb724bb6677112b582cd7da1b1b8d24ef2530fd57601efdc4f033bc2794355e486f0a64afe58808ef64b061988e2029774f01b86e1ec81233ca7f278e7169f79893cff27ef6b303ca668ac2a88d4d508bc2b1d7cb6391f2d74cd9b9ef6d85d382758de7d8eec9d1b6650a792bbc959d7f2fb889fc2ee5323611ac76e86ae8fbd2d296fe1ce5b425b7f9fb35ce68f4dcb5720b054fc0c59c1cd1299d2c5d00fc6ac742cb828e2f7770d3084ee39477d6cb2ae1ddc0d6cbaa2f61c1ead23a8f6bab41711ab0ff13c5ef5bf5159ec8a09a34e127d239651a285f1903db9e9d6d4cd20735a07f52bdf95f33b61d608bfbe775eecdbde570222ea7972c6b18dcda045bede2922d518a15347d22ba3552413f72060bed019ff855c1116c1343678c9027140ff2549f34601ee73038ec4eba59a31ea9812a71ec0d56f86b0aeae7d8362a2e3ed1edf2f9f7edd5fea4864ea7101fec157255dde3c84eedd1433f5214390b960152bbae059e37d89c194c30833a7e0859029f871cd67ba06ba05b9afa99e188ec0703e1b8ed3f314da7a85ea79069c1d4b02d8a88791e28cc6dac32b0488d7f5c0241592a086201bdf55bfbf3040d5066bdb0c1f2e2cdcd00468d16225b15d48ea97ed870b26d19e32ed3ee1b2139ee2d2f565c802715ea5dd97fc030186492f87419a3758308eb897fb903d23f2c6d7e68f27a1fd0ecb6b8a549e5f2872ed2a57a5b9f408ed69b72d41ae7578bd27951553539ad3f026032ecb6c1e13cd4519f93a239408e2ed5ab0f1718555bcc54d113c662e3893d9e88e1b3e872505dabc7d328797c9692fcb02322c8386ea139416eb47b6efe6e064c3c939424b2c734a77bf976f93bf526b7ec5ebc77036e3c8358c2da9bca8e7b84b3bd819ecb99887d08e827900c3b2c02042e7bb461d8e3414a25dc03fca7ae68cc291246303439c443b6d09e52ef98fb64eaf9934c0b4f572765d34c01453bbbad62e1df75898b384fac8a93b947d8362bf322a3917ade6e7ac8540aa6d41990cb89cce9ee03c0ec3a050a72381101102c32749ce58a7f984834df4f92642288a5dcc9f04d066f28f0f711e180a3f4f59c49c1bcbdb210b0664127396ff09876450e9a42f2dd43941254490f9c8b0775c1a5675c262e0c33d908cc51af9732a1499c7455276301f55076845c32bce3bbf97dbfdfe83f1b59ad535aa8143dcf57d8fffcdc845c93cb6eb03e90937b90c0719ee4d396b8d311b91be1dcca5d513a0b53eb5c9e276e3ee7f8074abab1ceb4610267db41ea4319a77ad424f6f4a636fcfc06b1ee9007c52f4d2fc3e1d29652ef1ac022562c49ac1a219aa8dd30b0dc2ac70f229ed20ca202c56b6183d9e15507ddf61c5d8de29dc7d6b9611f59b37891b6fdbc951a56d5726c813149d811c1391a215d53afd87109c49d838060dd6ecc5ef2bd1a64e"}, {0x8, 0x88be, 0x3, {{0x3, 0x1, 0x5, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x1, {0xfffffffa}}}, {0x8, 0x22eb, 0x1, {{0x7, 0x2, 0x5a, 0x2, 0x0, 0x3, 0x1, 0x9}, 0x2, {0x8000, 0x4, 0x0, 0x16, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x2, "54adb8078493aa0685974c828eda2264210e77ab7e3b4c959b524656317d1767"}}}}}}, 0x1121) 23:07:18 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x25000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:18 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x2e010000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1407.888413][T30126] usb 5-1: can't set config #1, error -71 [ 1407.896356][T30126] usb 5-1: USB disconnect, device number 26 [ 1407.911349][T28583] xt_ct_set_helper: 6 callbacks suppressed [ 1407.911354][T28583] xt_CT: You must specify a L4 protocol and not use inversions on it 23:07:18 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x40000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1407.954039][T28599] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1407.990937][T28612] xt_CT: You must specify a L4 protocol and not use inversions on it 23:07:18 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x3, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:18 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x48000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1408.007989][T28612] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1408.042471][T28621] xt_CT: You must specify a L4 protocol and not use inversions on it 23:07:18 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x4c000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1408.057152][T28621] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1408.097905][T28626] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1408.264463][T30126] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1408.504429][T30126] usb 5-1: Using ep0 maxpacket: 8 [ 1408.634463][T30126] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1408.644648][T30126] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1408.653553][T30126] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1408.824466][T30126] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1408.833534][T30126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.842202][T30126] usb 5-1: Product: syz [ 1408.851548][T30126] usb 5-1: Manufacturer: syz [ 1408.856447][T30126] usb 5-1: SerialNumber: syz [ 1409.495461][T30126] usb 5-1: USB disconnect, device number 27 [ 1410.244431][ T9993] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1410.484426][ T9993] usb 5-1: Using ep0 maxpacket: 8 [ 1410.604459][ T9993] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1410.614900][ T9993] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1410.623852][ T9993] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1410.794484][ T9993] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1410.803593][ T9993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.812217][ T9993] usb 5-1: Product: syz [ 1410.816919][ T9993] usb 5-1: Manufacturer: syz [ 1410.821509][ T9993] usb 5-1: SerialNumber: syz 23:07:21 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0x11000000, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:21 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x2, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:21 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x50020000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:21 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0xc0000, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000040)={0x18, 0x1, 0x0, {0x7f}}, 0x18) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r2, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r2, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "39b8ffd5c529579833773a721fb97555a67ed92f23fc493ed5e06e58604b9dd59d0d594dca7821b1cbf02084027227cddce57dcf9f003fa31d3d5d2d9ab081d9993883f2418595fed7ecf374ea46e3d90a83a87c7161ea89e18a42f1ba5552f05c0c71fdd67f497917911548e2e825b0a8fe36ea9bbddd2f3b049baf31be1dfed02eda22c2160e69a7fefb35242fff04fa2326275bf9e837846600abb52cbc1d425a78b8602c2707965ba07dd56d265c863bbd4ca4df496c676158286baf6c492df11ee13ede48f7e71ffb8bb558be7b6b8a193dac806d3d2a2b3e35eedd0486593284ee418e4d5f989f68ccdf34afbd7b286c6b391c5975cc9d5d880bfa34e6"}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, 0x1, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x86dd}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4305}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8848}]}, 0x2c}}, 0x4040004) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r4, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) setsockopt$inet_mreq(r4, 0x0, 0x20, &(0x7f0000000400)={@empty, @remote}, 0x8) write$tun(r0, &(0x7f0000000380)={@void, @val={0x1, 0x0, 0x0, 0x8000, 0xe0}, @mpls={[], @ipv4=@tipc={{0x6, 0x4, 0x1, 0x9, 0x39, 0x66, 0x0, 0x8, 0x6, 0x0, @multicast1, @multicast1, {[@noop]}}, @payload_conn={{{0x21, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x2, 0xa0e, 0x0, 0x2, 0x8, 0x4, 0x0, 0xa2, 0xfba, 0x4, 0x4e23, 0x4e22}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}, 0x43) 23:07:21 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:21 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d2406"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r1, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r1, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000000)) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000040)=0x9) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000039542f108c07021047e6000000010902240001000000000904db00010a04c80009210300000000810009050a"], 0x0) syz_usb_control_io$printer(r2, &(0x7f00000001c0)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="000083"], 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x98, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x2, 0x1, 0x0, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "dc"}, {0x5, 0x24, 0x0, 0x800}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x3, 0x3f, 0xfc}, {0x6, 0x24, 0x1a, 0x7fff, 0x30}, [@mbim_extended={0x8, 0x24, 0x1c, 0xfd, 0x6, 0x1f}, @obex={0x5, 0x24, 0x15, 0x3}, @mdlm_detail={0x18, 0x24, 0x13, 0x9, "cb71a3ef7fa54b40fc114d451310b2289894578a"}, @acm={0x4, 0x24, 0x2, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x38, 0x40, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x9, 0x81, 0x37}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x9, 0x8}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x201, 0x0, 0xbc, 0x3, 0xff, 0x3}, 0x4b, &(0x7f0000000380)={0x5, 0xf, 0x4b, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "575e9f694a8e50882cf92f30dd824cce"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x5, 0x7}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "7d1f34446a3067982aea458baf368d6d"}, @ss_container_id={0x14, 0x10, 0x4, 0x1f, "9cbfc2bde72066e7c8abd61d4446c4fb"}]}, 0x3, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x408}}]}) r3 = syz_usb_connect(0x3, 0x3cf, &(0x7f0000000540)={{0x12, 0x1, 0x201, 0x87, 0xda, 0x38, 0xff, 0x45e, 0x4d9, 0xd0c4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3bd, 0x1, 0x7, 0x1, 0x60, 0x5, [{{0x9, 0x4, 0xe9, 0x40, 0x10, 0x50, 0x63, 0x6b, 0x7f, [@generic={0xf1, 0x22, "00e1a62fab5077e43944bf420138e7854de43b8436f950309d9874d2603352eedd6feac8eef902dab32bec48f330bbec28bf810b8bb15ef7c8d5c73c7c40a08adb95a46f43e6140f84e5e10cee6f5f73e9121bcfce1852d3f0d980c7924e504444a76c6e43a54ceaed825f3512400b5c6054528c6062afb4f0bd04366fd18e8b708920099a94ebfe216d51133888f3db728e3cf10e6b64fc92627389466aff6d48f357b06604cde536f3bd91b2285d7d123fcb188747535429f439fd046f3368f294fa39704305dcc6383483e0d75b1125a5db59bd50f3ad2f8885f26016ce4f5c8f3577d3bca037e901ac9f75e15c"}], [{{0x9, 0x5, 0x8, 0x2, 0x200, 0xf7, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x6, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x3}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x0, 0x6, 0x9, [@generic={0xab, 0xd, "cac771ace53328d00aa47c7a980d5ccf6dfd17316e44a482b65f535c07ce312fb163593c92005793cad1e74456b60859c9068f5974f8186f2b7e8ad98b83e8f0af3ed7594d1eded4f62e10f100991e3d543633ed44552bbad129b0b58ebdd01f50e097e14f3105296c5242d3d8f9665e4e362eaa6ab8b506e534e3de5c3da34b1935a38183fcfb7d9eb4476f86fc6b308b904bbeb4d8b13a0105540cf56bf84ff835badd061eb1ac83"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0x3, 0xff, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x3f}]}}, {{0x9, 0x5, 0x2, 0x4, 0x200, 0x0, 0x3f, 0x1, [@generic={0x4a, 0x7, "6bd1428c02c87d48e106664d48cf06b876e2eab2423977b8f91daa6533f0bdeca087fb8dd46d163813e47a6486224abf55eb6c1f14b4212757349653e6de33ffebc3658e83da13b4"}, @generic={0xa, 0x11, "f24c1f79f4f9362a"}]}}, {{0x9, 0x5, 0xc, 0x4, 0x40, 0x3, 0x0, 0x1a}}, {{0x9, 0x5, 0x1, 0x10, 0x3ff, 0x8, 0x2, 0x24}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x5, 0x8, 0xaf}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x0, 0x0, 0xc0}}, {{0x9, 0x5, 0x9, 0x8, 0x20, 0xfa, 0x6, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x80, 0x1}]}}, {{0x9, 0x5, 0x0, 0xc, 0x3ff, 0x20, 0xff, 0x28}}, {{0x9, 0x5, 0xe, 0x10, 0x20, 0x5, 0x0, 0x92}}, {{0x9, 0x5, 0x6, 0xf, 0x400, 0x8, 0x9, 0x6b, [@generic={0x25, 0xc, "e4399c7bd11d643020937f2408138a4ddd52d119234796a17ef231a1bff9082e6e1341"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x200, 0x7f, 0xff, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x40}]}}, {{0x9, 0x5, 0x8, 0x3, 0x3ff, 0x2, 0x3, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3f}, @generic={0x76, 0xd, "240c5efc29620c72d54d1c41a8a5d918e988396c6efd04f7837704e3b5f87b24848607ef227d6fc7ed579af75ecb8e4f6b905dd42ca49b0883558a13446f1a8f0ba43fa4e6a1bf6b88a9cc4af3bb71ef5efa1a7ac158726e1e3dde2519caaa636b09b8cead2563545ef4f440b2207e947eabee11"}]}}, {{0x9, 0x5, 0xd, 0xe, 0x200, 0x0, 0x0, 0x39}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x0, 0x3, 0x2, [@generic={0x4a, 0x9, "3dfd7a6554d12610c4527234d933a8dd27448296baeeab71f875e4648af651e035c7649a069f0dd8de02054d6abb3fa5def2ead2ba098636a87f9590b81a44206ee3f3098bc8752c"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x8}]}}]}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000940)={0xa, 0x6, 0x310, 0x5, 0x6, 0x8, 0x10, 0x8}, 0x19, &(0x7f0000000980)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x7f, "17599ec06d8ea35fdd902d05383c0cae"}]}}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 23:07:21 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x52020000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1410.905414][ T9993] usb 5-1: USB disconnect, device number 28 [ 1410.937985][T28650] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1410.939558][T28646] xt_CT: You must specify a L4 protocol and not use inversions on it 23:07:21 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x60000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:21 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x68000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:21 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x6affffff], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1410.977441][T28659] xt_CT: You must specify a L4 protocol and not use inversions on it 23:07:21 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x3, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:21 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x6c000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:21 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0x40000000, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:21 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x2, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:21 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x74000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:22 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x7a000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:22 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x7ffffffe], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1411.314477][ T9993] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1411.554416][ T9993] usb 5-1: Using ep0 maxpacket: 8 [ 1411.674474][ T9993] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1411.684664][ T9993] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1411.693515][ T9993] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1411.864498][ T9993] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1411.873544][ T9993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.882343][ T9993] usb 5-1: Product: syz [ 1411.886827][ T9993] usb 5-1: Manufacturer: syz [ 1411.891478][ T9993] usb 5-1: SerialNumber: syz [ 1412.175603][T28654] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1412.183452][T28654] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1412.192427][T28654] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 23:07:24 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) recvfrom$packet(r2, &(0x7f0000000240)=""/152, 0x98, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100c2800000000000000000000000037515fa2c1ec28656aaa79bb94b44fe000000bc00020005000000140000270400117c22ebc20521400000d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd2000175e63fb8d38a8700"/252, 0xfc) dup3(r3, r2, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c000000838812fa48a9fe4ef1814ffbdd73b86304e049eeb801c14409b1fcb8bcf7d6033ff8ae8eb4d2c864f26946a622c0fa937526e3034883874f533e42a178788145567ca35bec8a69e638dcf10d7b4c2499631460573861eabe1e4fe3eaa31f5f8facc84d20d3fd205d70bf69e3fc39d62101f58e116408a65cfffb6f7bbd37b9f4b4ec718f71343c243203e44e6f784ee560edc7854286e1dc644ec68f53f2463e261537fd5d44aa18efa94756c19366b82e64b02c566834219b96e4f9cb64bd0c5d0122e9f8a4a2bce4b5fa", @ANYRES16=r4, @ANYBLOB="00022abd7000fcdbdf250a000000080001007063690011000200303030303a30303a31302e30000000000800030003000000080001007063690011000200303030303a30303a31302e30000000000800030000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x15}, 0x40) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)={0x1fc, r4, 0x4, 0x70bd25, 0x25dfdbfb, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x9}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8000}, {0x6, 0x11, 0xf8e}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x20}, {0x6, 0x11, 0x7}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2453}, {0x6, 0x11, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6, 0x11, 0x7f}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfff}, {0x6, 0x11, 0xfff7}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x8}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x2}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x4}}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x8080}, 0x20048010) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x22, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:24 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000082505a18740000102030109025c0002010000000904000001020d2406907659ad0a67d87ff603f9f8503ed244f87b4e0c2f06ededb9c313873510f7df373496414e3491653e26b8ccdb442750bab769c549531b270c3ddf926fff79b4e00f5dcc0749c8705aa50d8dd0025bd79b043ac5df6e9b02e6c871b790641452fb7639b5c3918a3d05f3ffc74ff85fa52df0ff05dac5a581c150385d7a6c043060e15546c6826287640f4bd938a2a50c8b160b65185ba86a17c997fed4108fffd60a05f3460a033bb5badfb653345f6a1714687fce8e6141da4b4f30d1cd9831268efeab9a377a9b60190dac10dbca607a161809"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x0, r1) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 23:07:24 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x9e010000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:24 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0x7f000000, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:24 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x3, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:24 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x4, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) [ 1413.939918][T30126] usb 5-1: USB disconnect, device number 29 [ 1413.978467][T28736] xt_ct_set_helper: 8 callbacks suppressed 23:07:24 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0xd2020000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:24 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0xee000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1413.978471][T28736] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1413.984218][T28730] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1413.995538][T28739] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34947 sclass=netlink_route_socket pid=28739 comm=syz-executor.1 [ 1414.017896][T28739] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28739 comm=syz-executor.1 [ 1414.026696][T28742] xt_CT: You must specify a L4 protocol and not use inversions on it 23:07:24 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0xfe000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:24 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0xce000000, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:24 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0xfeffff7f], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1414.050730][T28748] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1414.065908][T28748] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1414.089418][T28755] xt_CT: You must specify a L4 protocol and not use inversions on it 23:07:25 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0xffffff6a], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1414.116375][T28764] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1414.122267][T28763] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1414.130030][T28768] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34947 sclass=netlink_route_socket pid=28768 comm=syz-executor.1 [ 1414.154596][T28771] xt_CT: You must specify a L4 protocol and not use inversions on it 23:07:25 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'veth1_to_bridge\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x22, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="4c7c928f24d734944d4011ed8d47d5a33e94d70d16dfb087791af8d36fcd78c1a61d1a010174bb030a8b173c65de321f358c7eeb8c20e476fc590eb82a08b7e2264d1ccd1280e887ddc318dbc6d66a4d72b38467d74c68481aad14980656e513f979f54d2c90aa75eaf68b2232", 0x6d}, {&(0x7f0000000340)="cbaadf63542a18431b34f1a8aebe49242c629487d54df56f71c8129ff71873054c79afdc1cca0b2b468296c0fb7b380dd021e60a0f5362921a655e75797199b06d366ac0651a0c112fc04ad96f82a79c772db9234400687033f3d7199507d5ede0ba0d0a162f99583dc53923aec55b357df62d5d3036594ec5f2bfe0d9b7ecad599cb91e38b7b1d6e872035a71af16dfe8744d62e887557529253a98980ab4af698441dae83d", 0xa6}, {&(0x7f0000000400)="531991a50a4ee2bb8334d62497be17b3a402b028cc2737443b383920e7cc0a6a46cfc6655997665de6cb64fc7b232f261dce344b860f522895f94d4075f0c548907a480cb0c4c707791bf497ed5c8d41dcee0da55db874c0463ec75d46a7222a8b032b876dfb3fb3eed160fa6b3df0b60b9cda682ff145659076f1c3acaeb0a375ec51b051c1805dad057d12564ac762ef41ba881e99a62ebb05d3", 0x9b}, {&(0x7f00000004c0)="e4cc0f0178a21aadb67d58ae494d29d0a1e6e8f3efe82c034493d1e5ad3e09bce099afa51c11e957be3b366f4406d9c5eb152c8053c548efabc06c5518150009ff93f44ea5445d02a505abd40ef58988745544e0b5c53ee73013abafb2615f6dc8cdb307b1d7aeb5709d88c3a01a0e15ff994d86ffbc38fc5467d154a796c8cabdee4aea5164a41ef1d5910a37d2cc22d7ea31f365d9283347a0c589b593c123df3dde8e4150a1f35ccebb241e24740a3e05597e078fe153035bdf8631d34875d6a839af5edb1e1f5e91db47403b194ab2ae41c76809b98d30cb32d95d80dee23949", 0xe2}], 0x4) [ 1414.163529][T28739] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28739 comm=syz-executor.1 [ 1414.384386][T30126] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1414.624363][T30126] usb 5-1: Using ep0 maxpacket: 8 [ 1414.744402][T30126] usb 5-1: config 1 has an invalid descriptor of length 144, skipping remainder of the config [ 1414.754684][T30126] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1414.763542][T30126] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1414.934442][T30126] usb 5-1: New USB device found, idVendor=0525, idProduct=87a1, bcdDevice= 0.40 [ 1414.943464][T30126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.951996][T30126] usb 5-1: Product: syz [ 1414.956416][T30126] usb 5-1: Manufacturer: syz [ 1414.960986][T30126] usb 5-1: SerialNumber: syz [ 1415.605347][T30126] usb 5-1: USB disconnect, device number 30 [ 1416.354367][ T4681] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1416.594354][ T4681] usb 5-1: Using ep0 maxpacket: 8 [ 1416.714387][ T4681] usb 5-1: config 1 has an invalid descriptor of length 144, skipping remainder of the config [ 1416.724675][ T4681] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1416.733505][ T4681] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 23:07:27 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:27 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x4, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:27 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x11, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:27 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0xe0000000, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:27 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000082505a1a44000010204000001020d240675243d1224eba1e2ed88c4563e2a8a1e0661d978e017adca4d50e2e157d7b2cc3b67f257f26ab9939c6aea6c490d2c57a394bb88efa3aaa60afbca06b763267f91eedea4059b89f43543744485bcba3778c955308bb9ede01092a82dbe3a292a6eacd06f4949dcfe8cde82cb17c563d87bda5e5b548acf109239a9390d5a7334d01dca2fc5f42ecdc7379e0f37d8c5"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r1, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r1, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) timerfd_settime(r1, 0x1, &(0x7f0000000040), &(0x7f0000000080)) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x440a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 23:07:27 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000340)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x5, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x22, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) [ 1416.904422][ T4681] usb 5-1: New USB device found, idVendor=0525, idProduct=87a1, bcdDevice= 0.40 [ 1416.913473][ T4681] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.922040][ T4681] usb 5-1: Product: syz [ 1416.926497][ T4681] usb 5-1: Manufacturer: syz [ 1416.931084][ T4681] usb 5-1: SerialNumber: syz [ 1416.974707][ T4681] usb 5-1: can't set config #1, error -71 [ 1416.988993][ T4681] usb 5-1: USB disconnect, device number 31 23:07:27 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x2], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:27 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x3], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:27 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x4], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1417.016417][T28806] xt_CT: You must specify a L4 protocol and not use inversions on it 23:07:27 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x5], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:27 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x6], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:28 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x7], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:28 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x8], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:28 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x11, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:28 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0xce, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:28 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x9], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1417.354431][ T4681] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1417.604367][ T4681] usb 5-1: Using ep0 maxpacket: 8 [ 1417.644413][ T4681] usb 5-1: no configurations [ 1417.649029][ T4681] usb 5-1: can't read configurations, error -22 [ 1417.804366][ T4681] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1418.044345][ T4681] usb 5-1: Using ep0 maxpacket: 8 [ 1418.084429][ T4681] usb 5-1: no configurations [ 1418.089062][ T4681] usb 5-1: can't read configurations, error -22 [ 1418.096060][ T4681] usb usb5-port1: attempt power cycle [ 1418.804370][ T4681] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1418.894398][ T4681] usb 5-1: Using ep0 maxpacket: 8 [ 1418.934414][ T4681] usb 5-1: no configurations [ 1418.939040][ T4681] usb 5-1: can't read configurations, error -22 [ 1419.094362][ T4681] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1419.184426][ T4681] usb 5-1: Using ep0 maxpacket: 8 [ 1419.224382][ T4681] usb 5-1: no configurations [ 1419.228973][ T4681] usb 5-1: can't read configurations, error -22 [ 1419.236054][ T4681] usb usb5-port1: unable to enumerate USB device 23:07:30 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r1, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r1, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) getpeername(r1, &(0x7f0000000000)=@ipx, &(0x7f0000000100)=0x80) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 23:07:30 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0xa], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:30 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0xe2000000, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:30 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r2, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r2, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) sendmsg$nl_generic(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x29, 0x200, 0x70bd29, 0x25dfdbfd, {0x13}, [@typed={0xc, 0x91, 0x0, 0x0, @u64=0xa5}, @nested={0xc, 0x96, 0x0, 0x1, [@typed={0x8, 0x11, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0xc004) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x22, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:30 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:30 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0xe0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:30 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0xb], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1420.026643][T28885] xt_ct_set_helper: 14 callbacks suppressed [ 1420.026647][T28885] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1420.030084][T28880] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1420.061891][T28890] xt_CT: You must specify a L4 protocol and not use inversions on it 23:07:30 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0xc], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:30 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0xd], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1420.076974][T28890] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1420.099921][T28895] xt_CT: You must specify a L4 protocol and not use inversions on it 23:07:31 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe0, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:31 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0xe], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:31 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0xffffff7f, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) [ 1420.121819][T28903] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1420.127904][T28902] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1420.160830][T28910] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1420.167142][T28909] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1420.474349][T30126] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1420.744345][T30126] usb 5-1: device descriptor read/64, error 18 [ 1421.134361][T30126] usb 5-1: device descriptor read/64, error 18 [ 1421.404366][T30126] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1421.674369][T30126] usb 5-1: device descriptor read/64, error 18 [ 1422.064330][T30126] usb 5-1: device descriptor read/64, error 18 [ 1422.184444][T30126] usb usb5-port1: attempt power cycle [ 1422.894357][T30126] usb 5-1: new high-speed USB device number 38 using dummy_hcd 23:07:33 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d2406"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000380)={0x14, &(0x7f0000000100)={0x0, 0x3, 0xce, {0xce, 0x8, "8d99ed39ef430c189b700e6eb2f03c7f25b4d3bc8b1a5dad5f37bcacf7b34d87d3652a9b32bcc6ee7f0d912e57da1957c28fdcc6cd2de6d3219b9aae729c95ad26b52ba3d2b021ee9f4d1b1e48c71e59cac1082b77ea93abd53b399b6305a85ce2d2e6cf46a5a60e7518b3f873263cca9fa2bc499891fa5d4b6b970010f43b4b453984407158ba36b37bab7c3a1d3a353ff9874ff1225e04bd591041608e98f4ad1fbf43a66c98ffa6ffce9920d5227a55627d4f6a5498aaaf49b29c0d7df7ba88699143732f1a8a0d4817d9"}}, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000006c0)={0x44, &(0x7f00000003c0)={0x40, 0x14, 0x100, "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"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0xe0}, &(0x7f0000000580)={0x20, 0x80, 0x1c, {0x8000, 0x2, 0x172a, 0x20, 0x1, 0x7, 0x800, 0xf, 0x8, 0x1ff, 0x9, 0x4}}, &(0x7f00000005c0)={0x20, 0x85, 0x4, 0x6}, &(0x7f0000000600)={0x20, 0x83, 0x2}, &(0x7f0000000640)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000680)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r1, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r1, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "39b8ffd5c529579833773a721fb97555a67ed92f23fc493ed5e06e58604b9dd59d0d594dca7821b1cbf02084027227cddce57dcf9f003fa31d3d5d2d9ab081d9993883f2418595fed7ecf374ea46e3d90a83a87c7161ea89e18a42f1ba5552f05c0c71fdd67f497917911548e2e825b0a8fe36ea9bbddd2f3b049baf31be1dfed02eda22c2160e69a7fefb35242fff04fa2326275bf9e837846600abb52cbc1d425a78b8602c2707965ba07dd56d265c863bbd4ca4df496c676158286baf6c492df11ee13ede48f7e71ffb8bb558be7b6b8a193dac806d3d2a2b3e35eedd0486593284ee418e4d5f989f68ccdf34afbd7b286c6b391c5975cc9d5d880bfa34e6"}) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000000)=""/101) 23:07:33 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0xe2, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:33 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000000)) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r2, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r2, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "39b8ffd5c529579833773a721fb97555a67ed92f23fc493ed5e06e58604b9dd59d0d594dca7821b1cbf02084027227cddce57dcf9f003fa31d3d5d2d9ab081d9993883f2418595fed7ecf374ea46e3d90a83a87c7161ea89e18a42f1ba5552f05c0c71fdd67f497917911548e2e825b0a8fe36ea9bbddd2f3b049baf31be1dfed02eda22c2160e69a7fefb35242fff04fa2326275bf9e837846600abb52cbc1d425a78b8602c2707965ba07dd56d265c863bbd4ca4df496c676158286baf6c492df11ee13ede48f7e71ffb8bb558be7b6b8a193dac806d3d2a2b3e35eedd0486593284ee418e4d5f989f68ccdf34afbd7b286c6b391c5975cc9d5d880bfa34e6"}) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000040)={0x9f, 0x6, 0x8, 0x5, 0xffff}) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x101000, 0x0) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x22, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:33 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x10], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:33 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe80, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:33 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000002}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:33 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x11], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:33 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x12], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1423.053833][T28929] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1423.061994][T30126] usb 5-1: device descriptor read/8, error -71 23:07:34 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x25], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:34 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:34 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x48], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:34 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) [ 1423.284465][T30126] usb 5-1: device descriptor read/8, error -71 [ 1423.774396][T30126] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1423.864390][T30126] usb 5-1: Using ep0 maxpacket: 8 [ 1423.984379][T30126] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1423.994466][T30126] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1424.004269][T30126] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1424.174400][T30126] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1424.183455][T30126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.192006][T30126] usb 5-1: Product: syz [ 1424.196441][T30126] usb 5-1: Manufacturer: syz [ 1424.201011][T30126] usb 5-1: SerialNumber: syz 23:07:36 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x4c], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:36 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000003}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:36 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x258002, 0x48) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r3, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) ioctl$PPPIOCSMRU1(r3, 0x40047452, &(0x7f0000000080)=0xffff8000) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x22, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:36 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x2, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:36 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x2, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) [ 1426.036043][T30126] usb 5-1: USB disconnect, device number 39 23:07:36 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x60], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1426.090700][T29003] xt_ct_set_helper: 8 callbacks suppressed [ 1426.090704][T29003] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1426.105894][T29005] xt_CT: You must specify a L4 protocol and not use inversions on it 23:07:37 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x68], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:37 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x6c], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1426.138579][T29009] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1426.171365][T29015] xt_CT: You must specify a L4 protocol and not use inversions on it 23:07:37 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x74], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:37 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000080108000009040000010268238bf2498fbede7f73ae0d242006d27fffb9"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair(0x2, 0x1, 0x5, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000009140)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)={0x14, r3, 0x390c179b360adb45}, 0x14}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002a00270d00"/20, @ANYRES32=r6], 0x1ec}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r3, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) r7 = dup(r1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r7, 0x8982, &(0x7f0000000200)={0x6, 'veth0_virt_wifi\x00', {0x3}, 0x191f}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 23:07:37 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x3, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) [ 1426.211186][T29022] xt_CT: You must specify a L4 protocol and not use inversions on it 23:07:37 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x7a], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:37 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe00000e0}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:37 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r2, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r2, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) fsetxattr(r2, &(0x7f0000000000)=@known='trusted.syz\x00', &(0x7f0000000040)='syzkaller1\x00', 0xb, 0x3) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x22, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) [ 1426.251944][T29034] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1426.255569][T29032] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1426.291256][T29045] xt_CT: You must specify a L4 protocol and not use inversions on it 23:07:37 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0xee], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1426.296167][T29044] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1426.323861][T29051] xt_CT: You must specify a L4 protocol and not use inversions on it 23:07:37 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x3, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:37 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0xfe], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:37 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x4, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:37 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe00001b4}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:37 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x22, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r2, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r2, 0x5453, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000000040)={0x23, 0x3, 0x0, {0x2, 0x2, 0x0, ')['}}, 0x23) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "39b8ffd5c529579833773a721fb97555a67ed92f23fc493ed5e06e58604b9dd59d0d594dca7821b1cbf02084027227cddce57dcf9f003fa31d3d5d2d9ab081d9993883f2418595fed7ecf374ea46e3d90a83a87c7161ea89e18a42f1ba5552f05c0c71fdd67f497917911548e2e825b0a8fe36ea9bbddd2f3b049baf31be1dfed02eda22c2160e69a7fefb35242fff04fa2326275bf9e837846600abb52cbc1d425a78b8602c2707965ba07dd56d265c863bbd4ca4df496c676158286baf6c492df11ee13ede48f7e71ffb8bb558be7b6b8a193dac806d3d2a2b3e35eedd0486593284ee418e4d5f989f68ccdf34afbd7b286c6b391c5975cc9d5d880bfa34e6"}) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000000)={0x2b, @multicast1, 0x4e24, 0x0, 'nq\x00', 0x1, 0x7, 0x11}, 0x2c) 23:07:37 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x110], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1426.520420][ T9993] usb 5-1: new low-speed USB device number 40 using dummy_hcd [ 1426.934400][ T9993] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1426.941976][ T9993] usb 5-1: can't read configurations, error -61 [ 1427.094298][ T9993] usb 5-1: new low-speed USB device number 41 using dummy_hcd [ 1427.494394][ T9993] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1427.501939][ T9993] usb 5-1: can't read configurations, error -61 [ 1427.508949][ T9993] usb usb5-port1: attempt power cycle [ 1428.224335][ T9993] usb 5-1: new low-speed USB device number 42 using dummy_hcd [ 1428.474346][ T9993] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1428.481933][ T9993] usb 5-1: can't read configurations, error -61 [ 1428.634321][ T9993] usb 5-1: new low-speed USB device number 43 using dummy_hcd [ 1428.884368][ T9993] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1428.891926][ T9993] usb 5-1: can't read configurations, error -61 [ 1428.898955][ T9993] usb usb5-port1: unable to enumerate USB device 23:07:40 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x11, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:40 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x12e], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:40 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r1, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r1, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000000)={'geneve0\x00', {0x2, 0x4e22, @local}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000040)=0x3) prctl$PR_GET_NO_NEW_PRIVS(0x27) 23:07:40 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000000)={0x7, 'team0\x00', {0x2}, 0xd54}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x22, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:40 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x4, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:40 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x19e], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:40 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x250], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:40 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x252], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:40 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x2d2], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:40 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x11, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:40 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x300], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:40 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0xce, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe000ffe0}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) [ 1429.704339][ T9993] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 1429.974315][ T9993] usb 5-1: device descriptor read/64, error 18 [ 1430.364306][ T9993] usb 5-1: device descriptor read/64, error 18 [ 1430.634297][ T9993] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 1430.904340][ T9993] usb 5-1: device descriptor read/64, error 18 [ 1431.294321][ T9993] usb 5-1: device descriptor read/64, error 18 [ 1431.414361][ T9993] usb usb5-port1: attempt power cycle [ 1432.124309][ T9993] usb 5-1: new full-speed USB device number 46 using dummy_hcd 23:07:43 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r0, &(0x7f0000000500), 0x37d, 0x7fffefff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r1, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r1, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f00000004c0)={r2, r3/1000+10000}, 0x10) ioctl$TCSETSF(r0, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x68, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x5}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x4}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x2c, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0xff}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0x7}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x5}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x100}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x67}]}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x5}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x9}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x801}, 0x4c040) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x7) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x3f) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xec) 23:07:43 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x500], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:43 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0xce, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:43 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:43 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0xe0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:43 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d2406"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r1, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r1, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r2, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r2, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) r3 = dup3(r1, r2, 0x0) ioctl$HIDIOCGREPORTINFO(r3, 0xc00c4809, &(0x7f0000000000)={0x1, 0x3, 0x5}) 23:07:43 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x600], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:43 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x700], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1432.284358][ T9993] usb 5-1: device descriptor read/8, error -71 [ 1432.293017][T29175] xt_ct_set_helper: 14 callbacks suppressed [ 1432.293020][T29175] xt_CT: You must specify a L4 protocol and not use inversions on it 23:07:43 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x900], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:43 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0xa00], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1432.332449][T29192] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1432.351820][T29196] xt_CT: You must specify a L4 protocol and not use inversions on it 23:07:43 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:43 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0xb00], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1432.377150][T29201] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1432.396483][T29201] xt_CT: You must specify a L4 protocol and not use inversions on it 23:07:43 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0xc00], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:43 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0xe2, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:43 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0xe0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:43 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) write$tun(r0, &(0x7f0000000400)={@val={0x0, 0x201}, @val={0x3, 0x1, 0x3, 0x7ff, 0x374, 0x2}, @ipv4=@gre={{0x1e, 0x4, 0x0, 0x8, 0x247, 0x64, 0x0, 0x5, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x23}, {[@lsrr={0x83, 0x7, 0xad, [@multicast1]}, @generic={0x86, 0x8, "27fefe1ce2cd"}, @cipso={0x86, 0x53, 0x2, [{0x6, 0x9, "3ff0bb3c625c94"}, {0x2, 0x5, "f1bb77"}, {0x6, 0x11, "2872eafb7aade2c39f388bbfc76b68"}, {0x5, 0xb, "206e29919e68125bc7"}, {0x5, 0xd, "0c74e55d13c79fa4110ed5"}, {0x2, 0x4, "8b33"}, {0x6, 0x12, "b5af0365d1a1263de49edd9e0cab58ec"}]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x9f, 0x2, [], "bb38cf3ec03cc352b81289cf4ad8b6662588da4c22919aab9c8d08001c71a84ae3820cf7c83c646d670cba385d84a8f77ac0cb9d54966998483ddc0eb358beaa9e01a59f06b0984395a809baf85f01d1c54a5375f9d1b25512e54b560b9c9bdd17f0f1f697b4d70383c3ffb23cc5669438efd447c22b4fee0a2276c5dd2276ebb10a27c13b8ec2c980f7c513d9799d4a13ed6c96ccbd0aa26e4918f7952928"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [], "6f9e4057a7e571766ef17afa5fdd792372a421f1b341da8d113723b44d277f"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x5, 0x41], "c4c1b380ab39088d0d9fc69f0dd2b0dfbeecd61020d019aa75ff67c93916471d423e1bf8f6e959b8f5e371adf9b345f6765f"}, {0x8, 0x88be, 0x0, {{0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, 0x1}, 0x1, {0xfffffffd}}}, {0x8, 0x22eb, 0x4, {{0x5, 0x2, 0x7f, 0x0, 0x0, 0x0, 0x4, 0x1f}, 0x2, {0x5, 0x800, 0x1, 0x7, 0x0, 0x1, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x1, "1d295a44508407ce531738292fa45a1d6c9fd728ff1f54b55eacb65dbb722b5576d0fb52f532950517e6ea1b9ff12212ab82228785763ddf2f0f640c3f22a22f46d3d38919e0a26fb41d9ad61d7b3f152b6d6a9486d214f230c4a75d91e81ef6781547d9438b44c44981c2a4943fe4c6116983870f189bd09f61d15972367f99833c5aacd413685488ec1d61db9908d6cb40e8c94c59a5"}}}}, 0x255) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r2, &(0x7f0000000500), 0x37d, 0x7fffefff) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/70, 0x46}], 0x1, 0x800) ioctl$TCSETSF(r2, 0x5453, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000380)=0xc) syz_open_procfs(r3, &(0x7f00000003c0)='mountstats\x00') ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000040)={0x6, 0x7b}) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000000)) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x22, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) [ 1432.426380][T29212] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1432.440293][T29212] xt_CT: You must specify a L4 protocol and not use inversions on it 23:07:43 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0xd00], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1432.498493][T29223] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1432.515061][ T9993] usb 5-1: device descriptor read/8, error -71 [ 1432.529904][T29232] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1432.544966][T29232] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1433.004284][ T9993] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1433.094343][ T9993] usb 5-1: Using ep0 maxpacket: 8 [ 1433.214322][ T9993] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1433.224432][ T9993] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1433.233280][ T9993] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1433.404365][ T9993] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1433.413397][ T9993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.422018][ T9993] usb 5-1: Product: syz [ 1433.426472][ T9993] usb 5-1: Manufacturer: syz [ 1433.431043][ T9993] usb 5-1: SerialNumber: syz [ 1434.075371][ T9993] usb 5-1: USB disconnect, device number 47 [ 1434.824286][ T9993] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1435.064303][ T9993] usb 5-1: Using ep0 maxpacket: 8 [ 1435.184354][ T9993] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1435.194477][ T9993] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1435.203313][ T9993] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 23:07:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:46 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0xe00], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:46 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000e0000000450000e2000000000002907800000000e0000001220090780000000050a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bffffffffffffffff0eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"], 0xec) 23:07:46 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0xe2, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:46 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x300, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:46 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x183200, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rfcomm\x00') preadv(r1, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r1, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) r2 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/302], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r3, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "39b8ffd5c529579833773a721fb97555a67ed92f23fc493ed5e06e58604b9dd59d0d594dca7821b1cbf02084027227cddce57dcf9f003fa31d3d5d2d9ab081d9993883f2418595fed7ecf374ea46e3d90a83a87c7161ea89e18a42f1ba5552f05c0c71fdd67f497917911548e2e825b0a8fe36ea9bbddd2f3b049baf31be1dfed02eda22c2160e69a7fefb35242fff04fa2326275bf9e837846600abb52cbc1d425a78b8602c2707965ba07dd56d265c863bbd4ca4df496c676158286baf6c492df11ee13ede48f7e71ffb8bb558be7b6b8a193dac806d3d2a2b3e35eedd0486593284ee418e4d5f989f68ccdf34afbd7b286c6b391c5975cc9d5d880bfa34e6"}) fcntl$setstatus(r3, 0x4, 0x40000) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r4, 0x5453, 0x0) syz_usb_control_io(r2, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=r0, @ANYRES64], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) [ 1435.394684][ T9993] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1435.405871][ T9993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.413943][ T9993] usb 5-1: Product: syz [ 1435.419258][ T9993] usb 5-1: Manufacturer: syz 23:07:46 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x1001], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:46 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x1100], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:46 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x1200], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1435.444310][ T9993] usb 5-1: can't set config #1, error -71 [ 1435.450959][ T9993] usb 5-1: USB disconnect, device number 48 23:07:46 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x1100, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:46 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x1f00], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:46 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x300, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:46 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x2000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x2, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:46 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x22, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r3, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) ioctl$TCSBRK(r3, 0x5409, 0x74) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000380)={0x8, {{0xa, 0xff3b, 0x3, @local, 0x6}}, 0x1, 0x8, [{{0xa, 0x4e21, 0x1000, @mcast1, 0x1}}, {{0xa, 0x4e20, 0x8, @private2={0xfc, 0x2, [], 0x1}, 0x4}}, {{0xa, 0x4e23, 0x9, @local, 0x9}}, {{0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {{0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xd00e}}, {{0xa, 0x4e21, 0x4, @remote, 0x1ff}}, {{0xa, 0x4e21, 0x401, @empty, 0x1000}}, {{0xa, 0x4e23, 0x1, @private0={0xfc, 0x0, [], 0x1}, 0x5939}}]}, 0x490) preadv(r2, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r2, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'\x00', 0x200}) 23:07:46 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x2500], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:46 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x2e01], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1435.814291][ T9993] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 1436.084282][ T9993] usb 5-1: device descriptor read/64, error 18 [ 1436.474327][ T9993] usb 5-1: device descriptor read/64, error 18 [ 1436.744531][ T9993] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 1437.014286][ T9993] usb 5-1: device descriptor read/64, error 18 [ 1437.404342][ T9993] usb 5-1: device descriptor read/64, error 18 [ 1437.524350][ T9993] usb usb5-port1: attempt power cycle [ 1438.234290][ T9993] usb 5-1: new full-speed USB device number 51 using dummy_hcd 23:07:49 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x4000, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:49 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x4000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:49 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x1100, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:49 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x3, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:49 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x19e], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1438.404317][ T9993] usb 5-1: device descriptor read/8, error -61 23:07:49 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d2406"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r1, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r1, 0x5453, 0x0) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)={0x1110, 0x13, 0x10, 0x70bd26, 0x25dfdbfc, {0x2c, 0x8, 0x8, 0x40, {0x4e24, 0x4e24, [0x800, 0x1, 0x0, 0x60], [0x3, 0x6, 0x2, 0x10001], 0x0, [0x2, 0x7]}, 0x1000, 0x400}, [@INET_DIAG_REQ_BYTECODE={0xaf, 0x1, "e187ef7f54f8ca76876639bebb9e9d014548a381926c9a8a16250ae5edb03f5928aee311f9c278d9912702c2125fd09a97122b89e2a35fec99f8d3eaea45c3473e631333f7fb14e2c907a94e68ba4f43cabc765fea9b6e40df676805422029d2924e65bc5de4f668b1197358d21d6af7e12fb533c8ec70f8896776c978dcb465cdb1a22084ecb1f9744cdc945f7ffbbd41acb17472340a05623f274899a41bc67ad6ca4549a1d336a7557a"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0xb, 0x1, "16697afe72faf5"}]}, 0x1110}, 0x1, 0x0, 0x0, 0x11}, 0x20004041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r2, r3, 0x0, 0x4000000000dc) r4 = dup2(r2, 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f0000003800)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000037c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800a9a55256f71fe572fec2291bfca6c51c49b9dbe628c0212ec3241a", @ANYRES16=r5, @ANYBLOB="08002bbd7000fedb630204000000140003e8756172745f776966694dab9c1fe50462"], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4004800) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x60, r5, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'rose0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x60}}, 0x40005) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 23:07:49 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x4800], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1438.460236][T29341] xt_ct_set_helper: 9 callbacks suppressed [ 1438.460241][T29341] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1438.476433][T29344] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1438.489756][T29354] xt_CT: You must specify a L4 protocol and not use inversions on it 23:07:49 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x25000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:49 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x4c00], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:49 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0xe2, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:49 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x5002], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1438.505729][T29352] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1438.524794][T29364] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1438.534745][T29367] xt_CT: You must specify a L4 protocol and not use inversions on it 23:07:49 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x4, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:49 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x5202], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:49 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x7f00, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:49 executing program 1 (fault-call:7 fault-nth:0): r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:07:49 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x4000, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) [ 1438.557117][T29373] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1438.577839][T29373] xt_CT: You must specify a L4 protocol and not use inversions on it 23:07:49 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x6000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1438.634278][ T9993] usb 5-1: device descriptor read/8, error -71 [ 1438.646409][T29385] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1438.668565][T29392] FAULT_INJECTION: forcing a failure. [ 1438.668565][T29392] name failslab, interval 1, probability 0, space 0, times 0 [ 1438.681323][T29392] CPU: 1 PID: 29392 Comm: syz-executor.1 Not tainted 5.4.50-syzkaller-01108-gec57e3434c4a #0 [ 1438.688569][T29396] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1438.691453][T29392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1438.691456][T29392] Call Trace: [ 1438.691475][T29392] dump_stack+0x14a/0x1ce [ 1438.691491][T29392] ? devkmsg_release+0x11c/0x11c [ 1438.722092][T29392] ? show_regs_print_info+0x12/0x12 [ 1438.727266][T29392] ? memset+0x1f/0x40 [ 1438.731226][T29392] ? unwind_next_frame+0x1c90/0x2330 [ 1438.736514][T29392] should_fail+0x6fb/0x860 [ 1438.740986][T29392] ? setup_fault_attr+0x3d0/0x3d0 [ 1438.745989][T29392] ? __alloc_skb+0x88/0x4d0 [ 1438.750487][T29392] should_failslab+0x5/0x20 [ 1438.754963][T29392] kmem_cache_alloc+0x36/0x260 [ 1438.759705][T29392] ? unwind_get_return_address_ptr+0x130/0x130 [ 1438.765857][T29392] __alloc_skb+0x88/0x4d0 [ 1438.770152][T29392] ? memset+0x1f/0x40 [ 1438.774103][T29392] tipc_msg_create+0x49/0x3a0 [ 1438.778750][T29392] tipc_group_proto_xmit+0x14f/0x890 [ 1438.784003][T29392] tipc_group_cong+0x480/0x590 [ 1438.788746][T29392] ? tipc_group_update_bc_members+0x580/0x580 [ 1438.794805][T29392] ? stack_trace_save+0x1f0/0x1f0 [ 1438.799797][T29392] ? __kernel_text_address+0x93/0x110 [ 1438.805150][T29392] ? unwind_get_return_address+0x48/0x90 [ 1438.810793][T29392] ? arch_stack_walk+0xd8/0x120 [ 1438.815613][T29392] tipc_group_bc_cong+0x214/0x2e0 [ 1438.820616][T29392] ? tipc_group_cong+0x590/0x590 [ 1438.825535][T29392] ? stack_trace_save+0x123/0x1f0 [ 1438.830537][T29392] tipc_send_group_bcast+0x40a/0xda0 [ 1438.835805][T29392] ? __tipc_sendmsg+0x2cb0/0x2cb0 [ 1438.840797][T29392] ? proc_pident_instantiate+0x71/0x2f0 [ 1438.846312][T29392] ? wait_woken+0x260/0x260 [ 1438.850786][T29392] __tipc_sendmsg+0x420/0x2cb0 [ 1438.855538][T29392] ? avc_has_perm_noaudit+0x400/0x400 [ 1438.860890][T29392] ? local_bh_enable+0x20/0x20 [ 1438.865627][T29392] ? _raw_spin_lock_bh+0xa4/0x180 [ 1438.870618][T29392] ? _local_bh_enable+0x30/0x30 [ 1438.875439][T29392] ? memset+0x1f/0x40 [ 1438.879395][T29392] ? selinux_socket_sendmsg+0x122/0x340 [ 1438.884936][T29392] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1438.890970][T29392] ? import_iovec+0x1c2/0x380 [ 1438.895616][T29392] ? tipc_recvmsg+0x17f0/0x17f0 [ 1438.900433][T29392] tipc_sendmsg+0x51/0x70 [ 1438.904734][T29392] ____sys_sendmsg+0x58a/0x8d0 [ 1438.909468][T29392] ? __sys_sendmsg_sock+0x2b0/0x2b0 [ 1438.914633][T29392] __sys_sendmmsg+0x3b0/0x730 [ 1438.919278][T29392] ? __ia32_sys_sendmsg+0x90/0x90 [ 1438.924273][T29392] ? get_pid_task+0x86/0x90 [ 1438.928747][T29392] ? proc_fail_nth_write+0x18f/0x250 [ 1438.934014][T29392] ? proc_fail_nth_read+0x1d0/0x1d0 [ 1438.939220][T29392] ? proc_fail_nth_read+0x1d0/0x1d0 [ 1438.944388][T29392] ? memset+0x1f/0x40 [ 1438.948346][T29392] ? security_file_permission+0x128/0x300 [ 1438.954036][T29392] ? ksys_write+0x25d/0x2c0 [ 1438.958545][T29392] ? __ia32_sys_read+0x80/0x80 [ 1438.963278][T29392] __x64_sys_sendmmsg+0x9c/0xb0 [ 1438.968119][T29392] do_syscall_64+0xcb/0x150 [ 1438.972596][T29392] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1438.978456][T29392] RIP: 0033:0x45cb29 [ 1438.982324][T29392] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1439.001909][T29392] RSP: 002b:00007f7476ee2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1439.010300][T29392] RAX: ffffffffffffffda RBX: 00000000004fd720 RCX: 000000000045cb29 [ 1439.018284][T29392] RDX: 0000000000000002 RSI: 0000000020003800 RDI: 0000000000000007 [ 1439.026225][T29392] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1439.034182][T29392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1439.042125][T29392] R13: 0000000000000903 R14: 00000000004cbe13 R15: 00007f7476ee36d4 [ 1439.124253][ T9993] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1439.214399][ T9993] usb 5-1: Using ep0 maxpacket: 8 [ 1439.334336][ T9993] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1439.344428][ T9993] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1439.353305][ T9993] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1439.524322][ T9993] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1439.533349][ T9993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1439.541344][ T9993] usb 5-1: Product: syz [ 1439.545580][ T9993] usb 5-1: Manufacturer: syz [ 1439.550158][ T9993] usb 5-1: SerialNumber: syz [ 1440.215394][ T9993] usb 5-1: USB disconnect, device number 52 [ 1440.964261][T26062] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1441.204259][T26062] usb 5-1: Using ep0 maxpacket: 8 [ 1441.324305][T26062] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1441.334394][T26062] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1441.343251][T26062] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 23:07:52 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d2406"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair(0x4, 0x2, 0x523c, &(0x7f0000000000)) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r1, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r1, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000002c0)=""/4096, &(0x7f0000000040)=0x1000) 23:07:52 executing program 1 (fault-call:7 fault-nth:1): r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:07:52 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x6800], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:52 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x11, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:52 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x7f00, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:52 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0xce00, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:52 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x6c00], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1441.534345][T26062] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1441.547258][T26062] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.556231][T26062] usb 5-1: Product: syz [ 1441.560449][T26062] usb 5-1: Manufacturer: syz [ 1441.576384][T29426] FAULT_INJECTION: forcing a failure. 23:07:52 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x7400], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1441.576384][T29426] name failslab, interval 1, probability 0, space 0, times 0 [ 1441.593593][T26062] usb 5-1: can't set config #1, error -71 [ 1441.595118][T29426] CPU: 0 PID: 29426 Comm: syz-executor.1 Not tainted 5.4.50-syzkaller-01108-gec57e3434c4a #0 [ 1441.600297][T26062] usb 5-1: USB disconnect, device number 53 [ 1441.609436][T29426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1441.609439][T29426] Call Trace: [ 1441.609455][T29426] dump_stack+0x14a/0x1ce [ 1441.609464][T29426] ? devkmsg_release+0x11c/0x11c [ 1441.609472][T29426] ? show_regs_print_info+0x12/0x12 [ 1441.609487][T29426] should_fail+0x6fb/0x860 [ 1441.647390][T29426] ? setup_fault_attr+0x3d0/0x3d0 [ 1441.652396][T29426] ? tipc_msg_create+0x49/0x3a0 [ 1441.657224][T29426] should_failslab+0x5/0x20 [ 1441.661708][T29426] __kmalloc_track_caller+0x5d/0x2c0 [ 1441.666970][T29426] ? kmem_cache_alloc+0x1d5/0x260 [ 1441.671970][T29426] ? tipc_msg_create+0x49/0x3a0 [ 1441.676799][T29426] __alloc_skb+0xd1/0x4d0 [ 1441.681103][T29426] ? memset+0x1f/0x40 [ 1441.685064][T29426] tipc_msg_create+0x49/0x3a0 [ 1441.689726][T29426] tipc_group_proto_xmit+0x14f/0x890 [ 1441.694989][T29426] tipc_group_cong+0x480/0x590 [ 1441.699730][T29426] ? tipc_group_update_bc_members+0x580/0x580 [ 1441.705791][T29426] ? stack_trace_save+0x1f0/0x1f0 [ 1441.710807][T29426] ? __kernel_text_address+0x93/0x110 [ 1441.716155][T29426] ? unwind_get_return_address+0x48/0x90 [ 1441.721766][T29426] ? arch_stack_walk+0xd8/0x120 [ 1441.726593][T29426] tipc_group_bc_cong+0x214/0x2e0 [ 1441.731593][T29426] ? tipc_group_cong+0x590/0x590 [ 1441.736508][T29426] ? stack_trace_save+0x123/0x1f0 [ 1441.741508][T29426] tipc_send_group_bcast+0x40a/0xda0 [ 1441.746774][T29426] ? __tipc_sendmsg+0x2cb0/0x2cb0 [ 1441.751775][T29426] ? proc_pident_instantiate+0x71/0x2f0 [ 1441.757308][T29426] ? wait_woken+0x260/0x260 [ 1441.761795][T29426] __tipc_sendmsg+0x420/0x2cb0 [ 1441.766541][T29426] ? avc_has_perm_noaudit+0x400/0x400 [ 1441.771895][T29426] ? local_bh_enable+0x20/0x20 [ 1441.776643][T29426] ? _raw_spin_lock_bh+0xa4/0x180 [ 1441.781648][T29426] ? _local_bh_enable+0x30/0x30 [ 1441.786475][T29426] ? memset+0x1f/0x40 [ 1441.790453][T29426] ? selinux_socket_sendmsg+0x122/0x340 [ 1441.795981][T29426] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1441.802026][T29426] ? import_iovec+0x1c2/0x380 [ 1441.806683][T29426] ? tipc_recvmsg+0x17f0/0x17f0 [ 1441.811513][T29426] tipc_sendmsg+0x51/0x70 [ 1441.815826][T29426] ____sys_sendmsg+0x58a/0x8d0 [ 1441.820578][T29426] ? __sys_sendmsg_sock+0x2b0/0x2b0 [ 1441.825759][T29426] __sys_sendmmsg+0x3b0/0x730 [ 1441.830413][T29426] ? __ia32_sys_sendmsg+0x90/0x90 [ 1441.835417][T29426] ? get_pid_task+0x86/0x90 [ 1441.839896][T29426] ? proc_fail_nth_write+0x18f/0x250 [ 1441.845157][T29426] ? proc_fail_nth_read+0x1d0/0x1d0 [ 1441.850331][T29426] ? proc_fail_nth_read+0x1d0/0x1d0 [ 1441.855504][T29426] ? memset+0x1f/0x40 [ 1441.859473][T29426] ? security_file_permission+0x128/0x300 [ 1441.865172][T29426] ? ksys_write+0x25d/0x2c0 [ 1441.869649][T29426] ? file_open_root+0x450/0x450 [ 1441.874478][T29426] ? __ia32_sys_read+0x80/0x80 [ 1441.879218][T29426] __x64_sys_sendmmsg+0x9c/0xb0 [ 1441.884050][T29426] do_syscall_64+0xcb/0x150 [ 1441.888708][T29426] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1441.894578][T29426] RIP: 0033:0x45cb29 [ 1441.898450][T29426] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1441.918031][T29426] RSP: 002b:00007f7476ee2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1441.926426][T29426] RAX: ffffffffffffffda RBX: 00000000004fd720 RCX: 000000000045cb29 23:07:52 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x7a00], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:52 executing program 1 (fault-call:7 fault-nth:2): r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:07:52 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x9e01], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1441.934379][T29426] RDX: 0000000000000002 RSI: 0000000020003800 RDI: 0000000000000007 [ 1441.942345][T29426] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1441.950293][T29426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1441.958250][T29426] R13: 0000000000000903 R14: 00000000004cbe13 R15: 00007f7476ee36d4 23:07:52 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0xd202], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1442.099577][T29462] FAULT_INJECTION: forcing a failure. [ 1442.099577][T29462] name failslab, interval 1, probability 0, space 0, times 0 [ 1442.115141][T29462] CPU: 0 PID: 29462 Comm: syz-executor.1 Not tainted 5.4.50-syzkaller-01108-gec57e3434c4a #0 [ 1442.125320][T29462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1442.135342][T29462] Call Trace: [ 1442.138604][T29462] dump_stack+0x14a/0x1ce [ 1442.142904][T29462] ? devkmsg_release+0x11c/0x11c [ 1442.147810][T29462] ? __schedule+0x920/0xef0 [ 1442.152287][T29462] ? show_regs_print_info+0x12/0x12 [ 1442.157467][T29462] should_fail+0x6fb/0x860 [ 1442.161885][T29462] ? setup_fault_attr+0x3d0/0x3d0 [ 1442.166900][T29462] ? schedule+0x13b/0x1d0 [ 1442.171216][T29462] ? __alloc_skb+0x88/0x4d0 [ 1442.175691][T29462] should_failslab+0x5/0x20 [ 1442.180162][T29462] kmem_cache_alloc+0x36/0x260 [ 1442.184898][T29462] __alloc_skb+0x88/0x4d0 [ 1442.189212][T29462] tipc_msg_build+0xca/0x1a60 [ 1442.193884][T29462] ? tipc_group_cong+0x590/0x590 [ 1442.198790][T29462] ? remove_wait_queue+0x32/0x120 [ 1442.203783][T29462] tipc_send_group_bcast+0xa1c/0xda0 [ 1442.209043][T29462] ? __tipc_sendmsg+0x2cb0/0x2cb0 [ 1442.214046][T29462] ? proc_pident_instantiate+0x71/0x2f0 [ 1442.219564][T29462] ? wait_woken+0x260/0x260 [ 1442.224037][T29462] __tipc_sendmsg+0x420/0x2cb0 [ 1442.228772][T29462] ? avc_has_perm_noaudit+0x400/0x400 [ 1442.234141][T29462] ? local_bh_enable+0x20/0x20 [ 1442.238904][T29462] ? _raw_spin_lock_bh+0xa4/0x180 [ 1442.243918][T29462] ? _local_bh_enable+0x30/0x30 [ 1442.248739][T29462] ? memset+0x1f/0x40 [ 1442.252694][T29462] ? selinux_socket_sendmsg+0x122/0x340 [ 1442.258223][T29462] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1442.264259][T29462] ? import_iovec+0x1c2/0x380 [ 1442.268904][T29462] ? tipc_recvmsg+0x17f0/0x17f0 [ 1442.273741][T29462] tipc_sendmsg+0x51/0x70 [ 1442.278040][T29462] ____sys_sendmsg+0x58a/0x8d0 [ 1442.282773][T29462] ? __sys_sendmsg_sock+0x2b0/0x2b0 [ 1442.287941][T29462] __sys_sendmmsg+0x3b0/0x730 [ 1442.292586][T29462] ? __ia32_sys_sendmsg+0x90/0x90 [ 1442.297580][T29462] ? get_pid_task+0x86/0x90 [ 1442.302055][T29462] ? proc_fail_nth_write+0x18f/0x250 [ 1442.307311][T29462] ? proc_fail_nth_read+0x1d0/0x1d0 [ 1442.312503][T29462] ? proc_fail_nth_read+0x1d0/0x1d0 [ 1442.317667][T29462] ? memset+0x1f/0x40 [ 1442.321620][T29462] ? security_file_permission+0x128/0x300 [ 1442.324243][T26062] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1442.327314][T29462] ? ksys_write+0x25d/0x2c0 [ 1442.327331][T29462] ? file_open_root+0x450/0x450 [ 1442.344172][T29462] ? __ia32_sys_read+0x80/0x80 [ 1442.348919][T29462] __x64_sys_sendmmsg+0x9c/0xb0 [ 1442.353758][T29462] do_syscall_64+0xcb/0x150 [ 1442.358244][T29462] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1442.364105][T29462] RIP: 0033:0x45cb29 [ 1442.367965][T29462] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1442.387535][T29462] RSP: 002b:00007f7476ee2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1442.395932][T29462] RAX: ffffffffffffffda RBX: 00000000004fd720 RCX: 000000000045cb29 [ 1442.403871][T29462] RDX: 0000000000000002 RSI: 0000000020003800 RDI: 0000000000000007 [ 1442.411810][T29462] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1442.419754][T29462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1442.427725][T29462] R13: 0000000000000903 R14: 00000000004cbe13 R15: 00007f7476ee36d4 [ 1442.574256][T26062] usb 5-1: Using ep0 maxpacket: 8 [ 1442.694299][T26062] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1442.704391][T26062] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1442.713229][T26062] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1442.884302][T26062] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1442.893319][T26062] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.901870][T26062] usb 5-1: Product: syz [ 1442.906308][T26062] usb 5-1: Manufacturer: syz [ 1442.910908][T26062] usb 5-1: SerialNumber: syz [ 1443.555501][T26062] usb 5-1: USB disconnect, device number 54 [ 1444.304242][T26287] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1444.544223][T26287] usb 5-1: Using ep0 maxpacket: 8 [ 1444.664299][T26287] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1444.674375][T26287] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1444.683274][T26287] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 23:07:55 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r0, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r0, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "39b8ffd5c529579833773a721fb97555a67ed92f23fc493ed5e06e58604b9dd59d0d594dca7821b1cbf02084027227cddce57dcf9f003fa31d3d5d2d9ab081d9993883f2418595fed7ecf374ea46e3d90a83a87c7161ea89e18a42f1ba5552f05c0c71fdd67f497917911548e2e825b0a8fe36ea9bbddd2f3b049baf31be1dfed02eda22c2160e69a7fefb35242fff04fa2326275bf9e837846600abb52cbc1d425a78b8602c2707965ba07dd56d265c863bbd4ca4df496c676158286baf6c492df11ee13ede48f7e71ffb8bb558be7b6b8a193dac806d3d2a2b3e35eedd0486593284ee418e4d5f989f68ccdf34afbd7b286c6b391c5975cc9d5d880bfa34e6"}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_flowlabel\x00') r2 = timerfd_create(0x4, 0x80000) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) getpeername$packet(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x14) r3 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d2406"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00216e6255c73d5307e0be7bf1563603020000000203"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) 23:07:55 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0xce00, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:55 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0xee00], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:55 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0xe000, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:55 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0xce, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:55 executing program 1 (fault-call:7 fault-nth:3): r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:07:55 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0xfe00], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1444.874754][T26287] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1444.888232][T26287] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.896746][T29480] xt_ct_set_helper: 7 callbacks suppressed [ 1444.896750][T29480] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1444.910801][T26287] usb 5-1: Product: syz [ 1444.916279][T26287] usb 5-1: Manufacturer: syz 23:07:55 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x40000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1444.934263][T26287] usb 5-1: can't set config #1, error -71 [ 1444.937640][T29493] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1444.941440][T26287] usb 5-1: USB disconnect, device number 55 [ 1444.966395][T29501] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1444.970979][T29500] xt_CT: You must specify a L4 protocol and not use inversions on it 23:07:55 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x1000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:55 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x2000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1444.975414][T29488] FAULT_INJECTION: forcing a failure. [ 1444.975414][T29488] name failslab, interval 1, probability 0, space 0, times 0 [ 1444.997638][T29488] CPU: 0 PID: 29488 Comm: syz-executor.1 Not tainted 5.4.50-syzkaller-01108-gec57e3434c4a #0 [ 1445.002051][T29506] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1445.007775][T29488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1445.007778][T29488] Call Trace: [ 1445.007795][T29488] dump_stack+0x14a/0x1ce [ 1445.007804][T29488] ? devkmsg_release+0x11c/0x11c [ 1445.007812][T29488] ? show_regs_print_info+0x12/0x12 [ 1445.007821][T29488] should_fail+0x6fb/0x860 [ 1445.007830][T29488] ? setup_fault_attr+0x3d0/0x3d0 [ 1445.007841][T29488] ? tipc_msg_build+0xca/0x1a60 [ 1445.007849][T29488] should_failslab+0x5/0x20 [ 1445.007859][T29488] __kmalloc_track_caller+0x5d/0x2c0 [ 1445.007867][T29488] ? kmem_cache_alloc+0x1d5/0x260 [ 1445.007875][T29488] ? tipc_msg_build+0xca/0x1a60 [ 1445.007885][T29488] __alloc_skb+0xd1/0x4d0 [ 1445.007899][T29488] tipc_msg_build+0xca/0x1a60 [ 1445.086333][T29488] ? tipc_group_cong+0x590/0x590 [ 1445.091243][T29488] ? remove_wait_queue+0x32/0x120 [ 1445.096236][T29488] tipc_send_group_bcast+0xa1c/0xda0 [ 1445.101500][T29488] ? __tipc_sendmsg+0x2cb0/0x2cb0 [ 1445.106502][T29488] ? proc_pident_instantiate+0x71/0x2f0 [ 1445.112014][T29488] ? wait_woken+0x260/0x260 [ 1445.116487][T29488] __tipc_sendmsg+0x420/0x2cb0 [ 1445.121220][T29488] ? avc_has_perm_noaudit+0x400/0x400 [ 1445.126561][T29488] ? local_bh_enable+0x20/0x20 [ 1445.131295][T29488] ? _raw_spin_lock_bh+0xa4/0x180 [ 1445.136288][T29488] ? _local_bh_enable+0x30/0x30 [ 1445.141105][T29488] ? memset+0x1f/0x40 [ 1445.145059][T29488] ? selinux_socket_sendmsg+0x122/0x340 [ 1445.150593][T29488] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1445.156629][T29488] ? import_iovec+0x1c2/0x380 [ 1445.161279][T29488] ? tipc_recvmsg+0x17f0/0x17f0 [ 1445.166100][T29488] tipc_sendmsg+0x51/0x70 [ 1445.170409][T29488] ____sys_sendmsg+0x58a/0x8d0 [ 1445.175157][T29488] ? __sys_sendmsg_sock+0x2b0/0x2b0 [ 1445.180326][T29488] __sys_sendmmsg+0x3b0/0x730 [ 1445.184972][T29488] ? __ia32_sys_sendmsg+0x90/0x90 [ 1445.189983][T29488] ? get_pid_task+0x86/0x90 [ 1445.194454][T29488] ? proc_fail_nth_write+0x18f/0x250 [ 1445.199722][T29488] ? proc_fail_nth_read+0x1d0/0x1d0 [ 1445.204887][T29488] ? proc_fail_nth_read+0x1d0/0x1d0 [ 1445.210051][T29488] ? memset+0x1f/0x40 [ 1445.214012][T29488] ? security_file_permission+0x128/0x300 [ 1445.219709][T29488] ? ksys_write+0x25d/0x2c0 [ 1445.224184][T29488] ? __ia32_sys_read+0x80/0x80 [ 1445.228924][T29488] __x64_sys_sendmmsg+0x9c/0xb0 [ 1445.233744][T29488] do_syscall_64+0xcb/0x150 [ 1445.238217][T29488] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1445.244088][T29488] RIP: 0033:0x45cb29 [ 1445.247950][T29488] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1445.267523][T29488] RSP: 002b:00007f7476ee2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1445.275904][T29488] RAX: ffffffffffffffda RBX: 00000000004fd720 RCX: 000000000045cb29 [ 1445.283850][T29488] RDX: 0000000000000002 RSI: 0000000020003800 RDI: 0000000000000007 [ 1445.291791][T29488] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1445.299731][T29488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1445.307670][T29488] R13: 0000000000000903 R14: 00000000004cbe13 R15: 00007f7476ee36d4 23:07:56 executing program 1 (fault-call:7 fault-nth:4): r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:07:56 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0xe200, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) [ 1445.329033][T29511] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1445.333978][T29510] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1445.396246][T29516] FAULT_INJECTION: forcing a failure. [ 1445.396246][T29516] name failslab, interval 1, probability 0, space 0, times 0 [ 1445.408935][T29516] CPU: 1 PID: 29516 Comm: syz-executor.1 Not tainted 5.4.50-syzkaller-01108-gec57e3434c4a #0 [ 1445.419072][T29516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1445.429103][T29516] Call Trace: [ 1445.432364][T29516] dump_stack+0x14a/0x1ce [ 1445.436666][T29516] ? devkmsg_release+0x11c/0x11c [ 1445.441573][T29516] ? unwind_get_return_address+0x48/0x90 [ 1445.447174][T29516] ? show_regs_print_info+0x12/0x12 [ 1445.452348][T29516] ? arch_stack_walk+0xd8/0x120 [ 1445.457170][T29516] should_fail+0x6fb/0x860 [ 1445.461556][T29516] ? setup_fault_attr+0x3d0/0x3d0 [ 1445.466551][T29516] ? stack_trace_snprint+0x150/0x150 [ 1445.471815][T29516] ? __perf_event_task_sched_out+0xfe4/0x1110 [ 1445.477882][T29516] ? __alloc_skb+0x88/0x4d0 [ 1445.482373][T29516] should_failslab+0x5/0x20 [ 1445.486846][T29516] kmem_cache_alloc+0x36/0x260 [ 1445.491584][T29516] __alloc_skb+0x88/0x4d0 [ 1445.495892][T29516] ? __kasan_kmalloc+0x12c/0x1c0 [ 1445.500807][T29516] ? __kmalloc_track_caller+0x201/0x2c0 [ 1445.506319][T29516] __pskb_copy_fclone+0xa8/0xf70 [ 1445.511227][T29516] ? do_syscall_64+0xcb/0x150 [ 1445.515879][T29516] tipc_msg_reassemble+0x1b6/0x590 [ 1445.520960][T29516] ? tipc_msg_lookup_dest+0x9c0/0x9c0 [ 1445.526302][T29516] tipc_mcast_xmit+0x26b/0x17a0 [ 1445.531124][T29516] ? tipc_bcast_dec_bearer_dst_cnt+0x240/0x240 [ 1445.537260][T29516] ? _copy_from_iter_full+0x67f/0x840 [ 1445.542619][T29516] ? __alloc_skb+0x2e3/0x4d0 [ 1445.547180][T29516] ? tipc_msg_build+0x376/0x1a60 [ 1445.552090][T29516] ? __check_object_size+0x2e5/0x3b0 [ 1445.557343][T29516] ? tipc_msg_build+0x39e/0x1a60 [ 1445.562252][T29516] ? tipc_group_cong+0x590/0x590 [ 1445.567164][T29516] ? remove_wait_queue+0x32/0x120 [ 1445.572156][T29516] tipc_send_group_bcast+0xa4d/0xda0 [ 1445.577412][T29516] ? __tipc_sendmsg+0x2cb0/0x2cb0 [ 1445.582407][T29516] ? proc_pident_instantiate+0x71/0x2f0 [ 1445.587926][T29516] ? wait_woken+0x260/0x260 [ 1445.592403][T29516] __tipc_sendmsg+0x420/0x2cb0 [ 1445.597139][T29516] ? avc_has_perm_noaudit+0x400/0x400 [ 1445.602480][T29516] ? local_bh_enable+0x20/0x20 [ 1445.607212][T29516] ? _raw_spin_lock_bh+0xa4/0x180 [ 1445.612209][T29516] ? _local_bh_enable+0x30/0x30 [ 1445.614234][T26287] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1445.617059][T29516] ? memset+0x1f/0x40 [ 1445.617070][T29516] ? selinux_socket_sendmsg+0x122/0x340 [ 1445.617088][T29516] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1445.640089][T29516] ? import_iovec+0x1c2/0x380 [ 1445.644743][T29516] ? tipc_recvmsg+0x17f0/0x17f0 [ 1445.649567][T29516] tipc_sendmsg+0x51/0x70 [ 1445.653896][T29516] ____sys_sendmsg+0x58a/0x8d0 [ 1445.658651][T29516] ? __sys_sendmsg_sock+0x2b0/0x2b0 [ 1445.663817][T29516] __sys_sendmmsg+0x3b0/0x730 [ 1445.668462][T29516] ? __ia32_sys_sendmsg+0x90/0x90 [ 1445.673468][T29516] ? get_pid_task+0x86/0x90 [ 1445.677954][T29516] ? proc_fail_nth_write+0x18f/0x250 [ 1445.683204][T29516] ? proc_fail_nth_read+0x1d0/0x1d0 [ 1445.688384][T29516] ? proc_fail_nth_read+0x1d0/0x1d0 [ 1445.693552][T29516] ? memset+0x1f/0x40 [ 1445.697513][T29516] ? security_file_permission+0x128/0x300 [ 1445.703211][T29516] ? ksys_write+0x25d/0x2c0 [ 1445.707681][T29516] ? file_open_root+0x450/0x450 [ 1445.712502][T29516] ? __ia32_sys_read+0x80/0x80 [ 1445.717242][T29516] __x64_sys_sendmmsg+0x9c/0xb0 [ 1445.722072][T29516] do_syscall_64+0xcb/0x150 [ 1445.726562][T29516] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1445.732424][T29516] RIP: 0033:0x45cb29 [ 1445.736288][T29516] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1445.755861][T29516] RSP: 002b:00007f7476ee2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1445.764241][T29516] RAX: ffffffffffffffda RBX: 00000000004fd720 RCX: 000000000045cb29 [ 1445.772180][T29516] RDX: 0000000000000002 RSI: 0000000020003800 RDI: 0000000000000007 [ 1445.780135][T29516] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1445.788088][T29516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1445.796027][T29516] R13: 0000000000000903 R14: 00000000004cbe13 R15: 00007f7476ee36d4 [ 1445.864246][T26287] usb 5-1: Using ep0 maxpacket: 8 [ 1445.984286][T26287] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1445.994524][T26287] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1446.003363][T26287] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1446.174303][T26287] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1446.183434][T26287] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1446.191699][T26287] usb 5-1: Product: syz [ 1446.195891][T26287] usb 5-1: Manufacturer: syz [ 1446.200472][T26287] usb 5-1: SerialNumber: syz [ 1446.665502][T26287] usb 5-1: USB disconnect, device number 56 [ 1447.414246][T26287] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1447.654233][T26287] usb 5-1: Using ep0 maxpacket: 8 [ 1447.774269][T26287] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1447.784356][T26287] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1447.793194][T26287] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 23:07:58 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000082505a19840000102070000005c0002010000000904000001020d2024"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="5c5d556b65492b6b2ae63393befc206e9d4f1d6e3247abda4844b194165d0fe82f3980ca9564aa0c016d10349723f8a80f0dd4fb7aa64aa736989b2f44216b2074b1a4a1c5cc0a3559e74ddb6e870f5a38960b77"], 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x6, 0xd5, &(0x7f0000000140)="c3f4faa24faa182abc8e86e65469e50813aa8749e3dcb80bdb77d9c14b2e8d40a5adaed33d69a9bb05733dc388f96ffba86e4616857970d14164d1903dbae28ec73ca4b3b2eeef878749469a8581c22002cb6f83efc20f5c3e94771c1c026ca747aa08c9592ec09589c2a7a855ee0141ea71d5cc5214b1c536cbb8f4221617e382b7e6c7c8f72f9b0b204874325e5c26f0b0c2ea715a30c1e9b092682baf233d09e4ef542f10ef53d89ede6e66cad71915053f77a2be812f0ea2c4442b8189f7c610e4c414ab55eda953afe1bbafa339064956d7a6") syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 23:07:58 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x3000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:58 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0xe0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:58 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0xe000, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:58 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:07:58 executing program 1 (fault-call:7 fault-nth:5): r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:07:58 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x4000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1447.984301][T26287] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1447.993691][T26287] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1447.995719][T29546] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1448.006701][T26287] usb 5-1: Product: syz [ 1448.016928][T29550] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1448.017308][T26287] usb 5-1: Manufacturer: syz 23:07:58 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x5000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:58 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0xe2, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) [ 1448.053108][T29557] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1448.061246][T26287] usb 5-1: can't set config #1, error -71 [ 1448.069047][T26287] usb 5-1: USB disconnect, device number 57 [ 1448.091868][T29554] FAULT_INJECTION: forcing a failure. 23:07:58 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x6000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:07:59 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x7000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1448.091868][T29554] name failslab, interval 1, probability 0, space 0, times 0 [ 1448.107277][T29554] CPU: 1 PID: 29554 Comm: syz-executor.1 Not tainted 5.4.50-syzkaller-01108-gec57e3434c4a #0 [ 1448.117427][T29554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1448.127488][T29554] Call Trace: [ 1448.130772][T29554] dump_stack+0x14a/0x1ce [ 1448.135092][T29554] ? devkmsg_release+0x11c/0x11c [ 1448.140011][T29554] ? show_regs_print_info+0x12/0x12 [ 1448.145195][T29554] should_fail+0x6fb/0x860 23:07:59 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x8000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1448.149592][T29554] ? setup_fault_attr+0x3d0/0x3d0 [ 1448.154595][T29554] ? __pskb_copy_fclone+0xa8/0xf70 [ 1448.159696][T29554] should_failslab+0x5/0x20 [ 1448.164191][T29554] __kmalloc_track_caller+0x5d/0x2c0 [ 1448.169486][T29554] ? kmem_cache_alloc+0x1d5/0x260 [ 1448.174489][T29554] ? __pskb_copy_fclone+0xa8/0xf70 [ 1448.179590][T29554] __alloc_skb+0xd1/0x4d0 [ 1448.183938][T29554] ? __kmalloc_track_caller+0x201/0x2c0 [ 1448.189473][T29554] __pskb_copy_fclone+0xa8/0xf70 [ 1448.194400][T29554] ? do_syscall_64+0xcb/0x150 [ 1448.199072][T29554] tipc_msg_reassemble+0x1b6/0x590 [ 1448.204201][T29554] ? tipc_msg_lookup_dest+0x9c0/0x9c0 [ 1448.209577][T29554] tipc_mcast_xmit+0x26b/0x17a0 [ 1448.214417][T29554] ? tipc_bcast_dec_bearer_dst_cnt+0x240/0x240 [ 1448.220558][T29554] ? _copy_from_iter_full+0x67f/0x840 [ 1448.225900][T29554] ? __alloc_skb+0x2e3/0x4d0 [ 1448.230458][T29554] ? tipc_msg_build+0x376/0x1a60 [ 1448.235364][T29554] ? __check_object_size+0x2e5/0x3b0 [ 1448.240615][T29554] ? tipc_msg_build+0x39e/0x1a60 [ 1448.245521][T29554] ? tipc_group_cong+0x590/0x590 [ 1448.250440][T29554] ? remove_wait_queue+0x32/0x120 [ 1448.255430][T29554] tipc_send_group_bcast+0xa4d/0xda0 [ 1448.260698][T29554] ? __tipc_sendmsg+0x2cb0/0x2cb0 [ 1448.265691][T29554] ? proc_pident_instantiate+0x71/0x2f0 [ 1448.271219][T29554] ? wait_woken+0x260/0x260 [ 1448.275692][T29554] __tipc_sendmsg+0x420/0x2cb0 [ 1448.280457][T29554] ? avc_has_perm_noaudit+0x400/0x400 [ 1448.285799][T29554] ? local_bh_enable+0x20/0x20 [ 1448.290530][T29554] ? _raw_spin_lock_bh+0xa4/0x180 [ 1448.295520][T29554] ? _local_bh_enable+0x30/0x30 [ 1448.300334][T29554] ? memset+0x1f/0x40 [ 1448.304284][T29554] ? selinux_socket_sendmsg+0x122/0x340 [ 1448.309798][T29554] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1448.315831][T29554] ? import_iovec+0x1c2/0x380 [ 1448.320485][T29554] ? tipc_recvmsg+0x17f0/0x17f0 [ 1448.325301][T29554] tipc_sendmsg+0x51/0x70 [ 1448.329597][T29554] ____sys_sendmsg+0x58a/0x8d0 [ 1448.335802][T29554] ? __sys_sendmsg_sock+0x2b0/0x2b0 [ 1448.340966][T29554] __sys_sendmmsg+0x3b0/0x730 [ 1448.345622][T29554] ? __ia32_sys_sendmsg+0x90/0x90 [ 1448.350610][T29554] ? get_pid_task+0x86/0x90 [ 1448.355080][T29554] ? proc_fail_nth_write+0x18f/0x250 [ 1448.360334][T29554] ? proc_fail_nth_read+0x1d0/0x1d0 [ 1448.365498][T29554] ? proc_fail_nth_read+0x1d0/0x1d0 [ 1448.370676][T29554] ? memset+0x1f/0x40 [ 1448.374632][T29554] ? security_file_permission+0x128/0x300 [ 1448.380319][T29554] ? ksys_write+0x25d/0x2c0 [ 1448.384803][T29554] ? file_open_root+0x450/0x450 [ 1448.389636][T29554] ? __ia32_sys_read+0x80/0x80 [ 1448.394366][T29554] __x64_sys_sendmmsg+0x9c/0xb0 [ 1448.399182][T29554] do_syscall_64+0xcb/0x150 [ 1448.403671][T29554] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1448.409543][T29554] RIP: 0033:0x45cb29 [ 1448.413404][T29554] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1448.424594][T26287] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1448.432985][T29554] RSP: 002b:00007f7476ee2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1448.448884][T29554] RAX: ffffffffffffffda RBX: 00000000004fd720 RCX: 000000000045cb29 [ 1448.456840][T29554] RDX: 0000000000000002 RSI: 0000000020003800 RDI: 0000000000000007 [ 1448.464790][T29554] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1448.472740][T29554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1448.480695][T29554] R13: 0000000000000903 R14: 00000000004cbe13 R15: 00007f7476ee36d4 [ 1448.674239][T26287] usb 5-1: Using ep0 maxpacket: 8 [ 1448.714304][T26287] usb 5-1: no configurations [ 1448.718923][T26287] usb 5-1: can't read configurations, error -22 [ 1448.874262][T26287] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1449.114222][T26287] usb 5-1: Using ep0 maxpacket: 8 [ 1449.154280][T26287] usb 5-1: no configurations [ 1449.158883][T26287] usb 5-1: can't read configurations, error -22 [ 1449.165783][T26287] usb usb5-port1: attempt power cycle [ 1449.874253][T26287] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1449.964255][T26287] usb 5-1: Using ep0 maxpacket: 8 [ 1450.004320][T26287] usb 5-1: no configurations [ 1450.008914][T26287] usb 5-1: can't read configurations, error -22 [ 1450.164247][T26287] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1450.254317][T26287] usb 5-1: Using ep0 maxpacket: 8 [ 1450.294309][T26287] usb 5-1: no configurations [ 1450.298901][T26287] usb 5-1: can't read configurations, error -22 [ 1450.305796][T26287] usb usb5-port1: unable to enumerate USB device 23:08:01 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d2406"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 23:08:01 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x9000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:01 executing program 1 (fault-call:7 fault-nth:6): r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:08:01 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x2, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:01 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0xe200, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:01 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:01 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0xa000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:01 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:08:01 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:08:01 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0xb000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1451.018335][T29596] xt_ct_set_helper: 4 callbacks suppressed [ 1451.018340][T29596] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1451.052234][T29610] xt_CT: You must specify a L4 protocol and not use inversions on it 23:08:02 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x2, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:02 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0xc000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1451.083436][T29621] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1451.104748][T29621] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1451.143135][T29632] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1451.158735][T29632] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1451.444239][T26287] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1451.684235][T26287] usb 5-1: Using ep0 maxpacket: 8 [ 1451.804308][T26287] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1451.814591][T26287] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1451.823528][T26287] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1451.994293][T26287] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1452.003360][T26287] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.012748][T26287] usb 5-1: Product: syz [ 1452.017185][T26287] usb 5-1: Manufacturer: syz [ 1452.021756][T26287] usb 5-1: SerialNumber: syz [ 1452.675234][T26287] usb 5-1: USB disconnect, device number 62 [ 1453.414238][ T17] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1453.654210][ T17] usb 5-1: Using ep0 maxpacket: 8 [ 1453.774336][ T17] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1453.784462][ T17] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1453.793309][ T17] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 23:08:04 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0xd000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:04 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x2, 0x0}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:08:04 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:04 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x3, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:04 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x3, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) [ 1453.964306][ T17] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1453.973355][ T17] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1453.981905][ T17] usb 5-1: Product: syz [ 1453.986333][ T17] usb 5-1: Manufacturer: syz [ 1453.990904][ T17] usb 5-1: SerialNumber: syz 23:08:04 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d2406"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r1, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r1, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}}, 0x0) keyctl$restrict_keyring(0x1d, 0xfffffffffffffffa, &(0x7f0000000380)='cifs.idmap\x00', &(0x7f00000003c0)='\x00') sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r2, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000200)={0x7, 0x9, 0xfffffff7, 0x4, 0x7, "d26fe533777252480980b66c8aa4890aefaee0"}) [ 1454.017802][ T17] usb 5-1: can't set config #1, error -71 [ 1454.035847][ T17] usb 5-1: USB disconnect, device number 63 23:08:04 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0xe000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:04 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x10000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:04 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x4, 0x0}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) [ 1454.060804][T29654] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1454.083824][T29667] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1454.098327][T29667] xt_CT: You must specify a L4 protocol and not use inversions on it 23:08:05 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x10010000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:05 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x11000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:05 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x4, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) [ 1454.135550][T29679] xt_CT: You must specify a L4 protocol and not use inversions on it 23:08:05 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x12000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:05 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x101d0, 0x0}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:08:05 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x2, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:05 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x4, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:05 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x1f000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1454.414206][ T17] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1454.654206][ T17] usb 5-1: Using ep0 maxpacket: 8 [ 1454.774275][ T17] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1454.784370][ T17] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1454.793210][ T17] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1454.964284][ T17] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1454.973394][ T17] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.981981][ T17] usb 5-1: Product: syz [ 1454.986430][ T17] usb 5-1: Manufacturer: syz [ 1454.991001][ T17] usb 5-1: SerialNumber: syz [ 1455.625288][ T17] usb 5-1: USB disconnect, device number 64 [ 1456.374197][ T17] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1456.614195][ T17] usb 5-1: Using ep0 maxpacket: 8 [ 1456.734253][ T17] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1456.744370][ T17] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1456.753230][ T17] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1456.924308][ T17] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1456.933358][ T17] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.941971][ T17] usb 5-1: Product: syz [ 1456.946448][ T17] usb 5-1: Manufacturer: syz [ 1456.951021][ T17] usb 5-1: SerialNumber: syz 23:08:07 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x40000, 0x0}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:08:07 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x20000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:07 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x11, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:07 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x3, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:07 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x11, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:07 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d2406"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r1) request_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)='[(#[Q&\x8c@$\x00', r1) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 23:08:07 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x25000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1457.065316][ T17] usb 5-1: USB disconnect, device number 65 [ 1457.079288][T29744] xt_ct_set_helper: 6 callbacks suppressed [ 1457.079292][T29744] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1457.087080][T29749] xt_CT: You must specify a L4 protocol and not use inversions on it 23:08:08 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x1000000, 0x0}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:08:08 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x2e010000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:08 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x40000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:08 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x2000000, 0x0}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) [ 1457.117507][T29756] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1457.137627][T29761] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1457.156937][T29769] xt_CT: You must specify a L4 protocol and not use inversions on it 23:08:08 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x48000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:08 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0xce, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:08 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0xce, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:08 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x4c000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1457.168666][T29769] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1457.186809][T29778] xt_CT: You must specify a L4 protocol and not use inversions on it 23:08:08 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x4, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:08 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0xd0010100, 0x0}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) [ 1457.231024][T29789] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1457.454189][ T17] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1457.694214][ T17] usb 5-1: Using ep0 maxpacket: 8 [ 1457.814283][ T17] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1457.824398][ T17] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1457.833247][ T17] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1458.004274][ T17] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1458.013340][ T17] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.022104][ T17] usb 5-1: Product: syz [ 1458.026554][ T17] usb 5-1: Manufacturer: syz [ 1458.031123][ T17] usb 5-1: SerialNumber: syz [ 1458.675219][ T17] usb 5-1: USB disconnect, device number 66 [ 1459.424171][ T17] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1459.664236][ T17] usb 5-1: Using ep0 maxpacket: 8 [ 1459.784249][ T17] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1459.794330][ T17] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1459.803256][ T17] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1459.974270][ T17] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1459.983310][ T17] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.991884][ T17] usb 5-1: Product: syz [ 1459.996360][ T17] usb 5-1: Manufacturer: syz [ 1460.000930][ T17] usb 5-1: SerialNumber: syz 23:08:10 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0xffffff7f, 0x0}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:08:10 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x50020000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:10 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0xe0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:10 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x11, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:10 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0xe0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:10 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0xfffffffffffffff5}, 0x20) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/kcm\x00') preadv(r7, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r7, 0x5453, 0x0) ioctl$MON_IOCQ_URB_LEN(r7, 0x9201) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @private}}) write$tun(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="000000000180c2000000aaaaaaaaaaaa86dd60f10100000000001700000000000000000000000000000400000200000001000000ebfe8393f5e431f6c11c604b46e6258ff392c57dbc2945edfabd0bfa185896773f233c7eb243e4015992ce060544f201a8bbf10cf32e055b2de258489722f35b149642c457f1bb469fac86fc67eeabd57d47cddb7f0b8f76bf7b33f21ed609324855999f76788c9758b9da8ffaff239c030300c6a9b53cfa61b18847293d5e4590039c80c45795a3", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x4e) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r8, &(0x7f0000001680)=[{&(0x7f00000001c0)=""/196, 0xc4}, {&(0x7f00000002c0)=""/15, 0xf}, {&(0x7f0000000300)=""/200, 0xc8}, {&(0x7f0000000400)=""/158, 0x9e}, {&(0x7f0000001700)=""/4102, 0x1006}, {&(0x7f00000014c0)=""/154, 0x9a}, {&(0x7f0000001580)=""/188, 0xbc}, {&(0x7f0000001640)=""/9, 0x9}], 0x8, 0x7fffefff) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x18100, 0x0) 23:08:11 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x52020000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:11 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x60000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:11 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x68000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:11 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0, 0x2}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) [ 1460.085225][ T17] usb 5-1: USB disconnect, device number 67 [ 1460.103498][T29827] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1460.123502][T29835] xt_CT: You must specify a L4 protocol and not use inversions on it 23:08:11 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x6affffff], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:11 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x6c000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:11 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0, 0x4}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:08:11 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x74000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:11 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0xe2, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:11 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0xce, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0xe2, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:11 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0, 0x101d0}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:08:11 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x7a000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:11 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x300, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x300, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:11 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0xe0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:11 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r3, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 23:08:11 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x7ffffffe], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:11 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0x9e010000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:11 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0, 0x40000}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:08:11 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0xd2020000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:11 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:08:11 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0xee000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:11 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0xfe000000], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:11 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0, 0x2000000}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:08:11 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x1100, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x1100, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:11 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0xe2, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:12 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r3, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 23:08:12 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0xfeffff7f], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:12 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0, 0xd0010100}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:08:12 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0x0, 0xffffff6a], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:12 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:12 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0, 0xffffff7f}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:08:12 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x2], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:12 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0, 0x4000000000000}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:08:12 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x3], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:12 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x4000, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:12 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x4000, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:12 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x300, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:12 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r3, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 23:08:12 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:08:12 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x4], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:12 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x5], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:12 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x6], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:12 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x7], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:12 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0, 0x200000000000000}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:08:12 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x8], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:12 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x1100, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:12 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x7f00, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:12 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x7f00, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:12 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x9], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:12 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r3, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 23:08:12 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0, 0x8000000000000000}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:08:12 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0xa], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:12 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0, 0xd001010000000000}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:08:12 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0xb], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:12 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0xc], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:12 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0xd], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:12 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0, 0xffffff7f00000000}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:08:12 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0xe], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:12 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0xce00, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:12 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0xce00, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:12 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x4000, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:12 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0, 0xffffffff00000000}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:08:12 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r3, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 23:08:12 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x10], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:12 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x11], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:12 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x12], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:12 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x25], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:12 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:08:12 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x48], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:13 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0xe000, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:13 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:08:13 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0xe000, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:13 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x101d0}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:08:13 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x4c], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:13 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r3, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 23:08:13 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x7f00, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) [ 1462.250240][T30158] xt_ct_set_helper: 29 callbacks suppressed [ 1462.250273][T30158] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1462.260627][T30162] xt_CT: You must specify a L4 protocol and not use inversions on it 23:08:13 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:08:13 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x60], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1462.326780][T30179] xt_CT: You must specify a L4 protocol and not use inversions on it 23:08:13 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0xe200, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:13 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x68], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:13 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0xe200, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) [ 1462.438558][T30190] xt_CT: You must specify a L4 protocol and not use inversions on it 23:08:13 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0xce00, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:13 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r3, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) 23:08:13 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x6c], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:13 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) [ 1462.544634][T30205] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1462.570575][T30208] xt_CT: You must specify a L4 protocol and not use inversions on it 23:08:13 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:13 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x74], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:13 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:08:13 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x7a], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1462.602859][T30220] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1462.627203][T30229] xt_CT: You must specify a L4 protocol and not use inversions on it 23:08:13 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0xee], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1462.676527][T30238] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1462.692474][T30239] xt_CT: You must specify a L4 protocol and not use inversions on it 23:08:13 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70293ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:13 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0xe000, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:13 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x2, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:13 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r3, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) 23:08:13 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0xfe], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:13 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x110], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:13 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x12e], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:13 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xd0010100}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:08:13 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x19e], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:13 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:08:13 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x250], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:13 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:08:13 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r3, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) 23:08:13 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70393ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:13 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0xe200, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:13 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x3, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:13 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x252], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:14 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x2d2], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:14 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:08:14 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x300], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:14 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x500], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:14 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x600], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:14 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x700], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:14 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1026d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:14 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r3, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "39b8ffd5c529579833773a721fb97555a67ed92f23fc493ed5e06e58604b9dd59d0d594dca7821b1cbf02084027227cddce57dcf9f003fa31d3d5d2d9ab081d9993883f2418595fed7ecf374ea46e3d90a83a87c7161ea89e18a42f1ba5552f05c0c71fdd67f497917911548e2e825b0a8fe36ea9bbddd2f3b049baf31be1dfed02eda22c2160e69a7fefb35242fff04fa2326275bf9e837846600abb52cbc1d425a78b8602c2707965ba07dd56d265c863bbd4ca4df496c676158286baf6c492df11ee13ede48f7e71ffb8bb558be7b6b8a193dac806d3d2a2b3e35eedd0486593284ee418e4d5f989f68ccdf34afbd7b286c6b391c5975cc9d5d880bfa34e6"}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 23:08:14 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:08:14 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:14 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x4, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:14 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x900], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:14 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0xa00], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:14 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0xb00], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:14 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:08:14 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0xc00], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:14 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0xd00], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:14 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xd001010000000000}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:08:14 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0xe00], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:14 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r3, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 23:08:14 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1036d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:14 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x2, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:14 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x11, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:14 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:08:14 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x1001], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:14 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x1100], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:14 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x1200], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:14 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:08:14 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x3, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:14 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0xce, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:14 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1046d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:14 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r3, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 23:08:14 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x1f00], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:14 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x2000], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:14 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:08:14 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x2500], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:14 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x2e01], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:14 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x4000], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:14 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x4, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:14 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x4800], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:14 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1056d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:14 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0xe0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:15 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r3, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "39b8ffd5c529579833773a721fb97555a67ed92f23fc493ed5e06e58604b9dd59d0d594dca7821b1cbf02084027227cddce57dcf9f003fa31d3d5d2d9ab081d9993883f2418595fed7ecf374ea46e3d90a83a87c7161ea89e18a42f1ba5552f05c0c71fdd67f497917911548e2e825b0a8fe36ea9bbddd2f3b049baf31be1dfed02eda22c2160e69a7fefb35242fff04fa2326275bf9e837846600abb52cbc1d425a78b8602c2707965ba07dd56d265c863bbd4ca4df496c676158286baf6c492df11ee13ede48f7e71ffb8bb558be7b6b8a193dac806d3d2a2b3e35eedd0486593284ee418e4d5f989f68ccdf34afbd7b286c6b391c5975cc9d5d880bfa34e6"}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 23:08:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x4c00], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:15 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:08:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x5002], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x5202], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x6000], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x6800], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:15 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1066d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:15 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x11, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:15 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r3, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 23:08:15 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0xe2, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x6c00], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x7400], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:15 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:08:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x7a00], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x9e01], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0xd202], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0xee00], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:15 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x300, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:15 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0xce, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0xfe00], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:15 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r3, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 23:08:15 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1076d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:15 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101d0}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:08:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x40000], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x1000000], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x2000000], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x3000000], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x4000000], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:15 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0xe0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:15 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1086d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:15 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x1100, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:15 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r3, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "39b8ffd5c529579833773a721fb97555a67ed92f23fc493ed5e06e58604b9dd59d0d594dca7821b1cbf02084027227cddce57dcf9f003fa31d3d5d2d9ab081d9993883f2418595fed7ecf374ea46e3d90a83a87c7161ea89e18a42f1ba5552f05c0c71fdd67f497917911548e2e825b0a8fe36ea9bbddd2f3b049baf31be1dfed02eda22c2160e69a7fefb35242fff04fa2326275bf9e837846600abb52cbc1d425a78b8602c2707965ba07dd56d265c863bbd4ca4df496c676158286baf6c492df11ee13ede48f7e71ffb8bb558be7b6b8a193dac806d3d2a2b3e35eedd0486593284ee418e4d5f989f68ccdf34afbd7b286c6b391c5975cc9d5d880bfa34e6"}) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 23:08:15 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:08:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x5000000], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x6000000], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x7000000], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x8000000], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x9000000], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:15 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1096d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:16 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0xa000000], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:16 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0xe2, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:16 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x4000, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:16 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r3, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "39b8ffd5c529579833773a721fb97555a67ed92f23fc493ed5e06e58604b9dd59d0d594dca7821b1cbf02084027227cddce57dcf9f003fa31d3d5d2d9ab081d9993883f2418595fed7ecf374ea46e3d90a83a87c7161ea89e18a42f1ba5552f05c0c71fdd67f497917911548e2e825b0a8fe36ea9bbddd2f3b049baf31be1dfed02eda22c2160e69a7fefb35242fff04fa2326275bf9e837846600abb52cbc1d425a78b8602c2707965ba07dd56d265c863bbd4ca4df496c676158286baf6c492df11ee13ede48f7e71ffb8bb558be7b6b8a193dac806d3d2a2b3e35eedd0486593284ee418e4d5f989f68ccdf34afbd7b286c6b391c5975cc9d5d880bfa34e6"}) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 23:08:16 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0xb000000], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:16 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:08:16 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0xc000000], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:16 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0xd000000], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:16 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0xe000000], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:16 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x10000000], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:16 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd10a6d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:16 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x10010000], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:16 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:16 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:08:16 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x7f00, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:16 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r3, 0x5453, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 23:08:16 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x11000000], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:16 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x12000000], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:16 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x1f000000], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:16 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x20000000], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:16 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0xce00, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:16 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd10b6d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:16 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0x2, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:16 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r3, 0x5453, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 23:08:16 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x25000000], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:16 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0010100}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:08:16 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0xe000, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:16 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x2e010000], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:16 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x40000000], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:16 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x48000000], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:16 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x4c000000], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:16 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x50020000], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:16 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0x3, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:16 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd10c6d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:16 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0xe200, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:16 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r3, 0x5453, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 23:08:16 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x52020000], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:16 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:08:16 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x60000000], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:16 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x68000000], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:16 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x6affffff], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:16 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0x4, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:17 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70293ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:17 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x6c000000], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:17 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd10d6d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:17 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$TCSETSF(r3, 0x5453, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 23:08:17 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:08:17 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x74000000], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:17 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x7a000000], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:17 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x7ffffffe], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:17 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x9e010000], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:17 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0x11, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:17 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd10e6d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:17 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70393ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:17 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}, 0x2}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:08:17 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "39b8ffd5c529579833773a721fb97555a67ed92f23fc493ed5e06e58604b9dd59d0d594dca7821b1cbf02084027227cddce57dcf9f003fa31d3d5d2d9ab081d9993883f2418595fed7ecf374ea46e3d90a83a87c7161ea89e18a42f1ba5552f05c0c71fdd67f497917911548e2e825b0a8fe36ea9bbddd2f3b049baf31be1dfed02eda22c2160e69a7fefb35242fff04fa2326275bf9e837846600abb52cbc1d425a78b8602c2707965ba07dd56d265c863bbd4ca4df496c676158286baf6c492df11ee13ede48f7e71ffb8bb558be7b6b8a193dac806d3d2a2b3e35eedd0486593284ee418e4d5f989f68ccdf34afbd7b286c6b391c5975cc9d5d880bfa34e6"}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 23:08:17 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0xd2020000], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:17 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0xee000000], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:17 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0xfe000000], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:17 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0xfeffff7f], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:17 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0xffffff6a], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:17 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}, 0x4}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:08:17 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd10f6d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:17 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0xce, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:17 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:17 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d7e093ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:17 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r3, &(0x7f0000000500), 0x37d, 0x7fffefff) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000240)={0x5, 0x0, "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"}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x5, 0x4, 0x7fff, 0xee, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 23:08:17 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x0, 0x2], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:17 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x0, 0x3], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:17 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}, 0x101d0}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:08:17 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x0, 0x4], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:17 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}, 0x40000}, {{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) 23:08:17 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [0x0, 0x5], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffff7, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 23:08:17 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0xe0, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1406d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:17 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x11, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1026d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) 23:08:17 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xe0}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x16, 0x0, 0x0, 0x0, 0x0, "50a69d92e9222cbba0f5d70193ef45f8533a1b922f22d1efc00b42819157d7d51c1ed98522788df5cba54b9cd1106d16bb040500b2f17999490c791706035343eb4370e844ce8435eefff0711e187824dfb24bc809795d87a6bff50eaa790e78d64ef3c5dba0de32e68ae17c71b913ed56d365923f6a5a92fb262d717f300e9dea59fc4c93574b7503b71cd85aed7fa465946658e040e766603ac49be30708ffa71d77bab8b2a3d367bcb7eb5bf882b06cf6b196b140db24b081ea3c970fd233627b61837ddc"}}}}, 0xec) [ 1466.987344][T31105] ------------[ cut here ]------------ [ 1466.992822][T31105] kernel BUG at ./include/linux/swapops.h:195! [ 1466.999007][T31105] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1467.005068][T31105] CPU: 0 PID: 31105 Comm: syz-executor.4 Not tainted 5.4.50-syzkaller-01108-gec57e3434c4a #0 [ 1467.015196][T31105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1467.025285][T31105] RIP: 0010:unmap_page_range+0x16c4/0x16e0 [ 1467.031095][T31105] Code: 00 00 00 65 48 8b 04 25 28 00 00 00 48 3b 84 24 40 01 00 00 75 1d 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 5c 03 da ff <0f> 0b e8 55 03 da ff 0f 0b e8 7e 67 b1 ff 0f 1f 40 00 66 2e 0f 1f [ 1467.050673][T31105] RSP: 0018:ffff8881117d7680 EFLAGS: 00010293 [ 1467.056832][T31105] RAX: ffffffff8167fc24 RBX: 0000000000000000 RCX: ffff8881cdd09f00 [ 1467.065126][T31105] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1467.073181][T31105] RBP: ffff8881117d7810 R08: ffffffff8167ede6 R09: fffffb1df891b711 [ 1467.081137][T31105] R10: fffffb1df891b711 R11: 0000000000000000 R12: 1ffff110395e3e31 [ 1467.089100][T31105] R13: 0003ffc440edc91d R14: fffff8efc48db880 R15: ffff8881db923a10 [ 1467.097040][T31105] FS: 0000000000000000(0000) GS:ffff8881db800000(0000) knlGS:0000000000000000 [ 1467.105941][T31105] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1467.112494][T31105] CR2: 0000001b31021000 CR3: 0000000004c0e006 CR4: 00000000001606f0 [ 1467.120456][T31105] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1467.128400][T31105] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 1467.136377][T31105] Call Trace: [ 1467.139644][T31105] ? copy_page_range+0x1710/0x1710 [ 1467.144731][T31105] unmap_vmas+0x1b5/0x230 [ 1467.149037][T31105] exit_mmap+0x28a/0x500 [ 1467.153263][T31105] ? vm_brk+0x240/0x240 [ 1467.157393][T31105] ? mutex_unlock+0x19/0x40 [ 1467.161868][T31105] ? uprobe_clear_state+0x291/0x2f0 [ 1467.167384][T31105] __mmput+0x34/0x240 [ 1467.171356][T31105] do_exit+0xa6c/0x2700 [ 1467.175484][T31105] ? mm_update_next_owner+0x600/0x600 [ 1467.180826][T31105] ? futex_exit_release+0xc0/0xc0 [ 1467.185818][T31105] ? __free_one_page+0x7b8/0x9e0 [ 1467.190744][T31105] ? _raw_spin_lock_irq+0xa2/0x180 [ 1467.196030][T31105] ? _raw_spin_lock_irqsave+0x1e0/0x1e0 [ 1467.201560][T31105] do_group_exit+0x155/0x2b0 [ 1467.206123][T31105] get_signal+0x13ec/0x1f00 [ 1467.210622][T31105] ? ptrace_notify+0x340/0x340 [ 1467.215357][T31105] ? put_task_stack+0x202/0x230 [ 1467.220195][T31105] ? put_task_struct_rcu_user+0x32/0x60 [ 1467.225715][T31105] ? finish_task_switch+0x352/0x4c0 [ 1467.230893][T31105] do_signal+0x95/0x5d0 [ 1467.235019][T31105] ? signal_fault+0x1f0/0x1f0 [ 1467.239668][T31105] prepare_exit_to_usermode+0x207/0x2e0 [ 1467.245194][T31105] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1467.251100][T31105] RIP: 0033:0x45cb29 [ 1467.254987][T31105] Code: Bad RIP value. [ 1467.259060][T31105] RSP: 002b:00007f64d9afecf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1467.267449][T31105] RAX: fffffffffffffe00 RBX: 000000000078c048 RCX: 000000000045cb29 [ 1467.275418][T31105] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078c048 [ 1467.283359][T31105] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 1467.291315][T31105] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078c04c [ 1467.299256][T31105] R13: 00007ffd845356bf R14: 00007f64d9aff9c0 R15: 000000000078c04c [ 1467.307197][T31105] Modules linked in: [ 1467.311473][T31105] ---[ end trace 1c5f6e6faea2ee49 ]--- [ 1467.316948][T31105] RIP: 0010:unmap_page_range+0x16c4/0x16e0 [ 1467.322742][T31105] Code: 00 00 00 65 48 8b 04 25 28 00 00 00 48 3b 84 24 40 01 00 00 75 1d 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 5c 03 da ff <0f> 0b e8 55 03 da ff 0f 0b e8 7e 67 b1 ff 0f 1f 40 00 66 2e 0f 1f [ 1467.342361][T31105] RSP: 0018:ffff8881117d7680 EFLAGS: 00010293 [ 1467.348442][T31105] RAX: ffffffff8167fc24 RBX: 0000000000000000 RCX: ffff8881cdd09f00 [ 1467.356434][T31105] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1467.364441][T31105] RBP: ffff8881117d7810 R08: ffffffff8167ede6 R09: fffffb1df891b711 [ 1467.372395][T31105] R10: fffffb1df891b711 R11: 0000000000000000 R12: 1ffff110395e3e31 [ 1467.380371][T31105] R13: 0003ffc440edc91d R14: fffff8efc48db880 R15: ffff8881db923a10 [ 1467.388372][T31105] FS: 0000000000000000(0000) GS:ffff8881db800000(0000) knlGS:0000000000000000 [ 1467.397320][T31105] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1467.403885][T31105] CR2: 000000000045caff CR3: 0000000004c0e006 CR4: 00000000001606f0 [ 1467.411860][T31105] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1467.419850][T31105] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 1467.427839][T31105] Kernel panic - not syncing: Fatal exception [ 1467.434297][T31105] Kernel Offset: disabled [ 1467.438612][T31105] Rebooting in 86400 seconds..