IFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) [ 318.922206] device syz_tun left promiscuous mode [ 319.003912] device syz_tun entered promiscuous mode [ 319.021658] device syz_tun left promiscuous mode 03:53:30 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x12}) r1 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x80000) recvfrom$unix(r1, &(0x7f0000000140)=""/106, 0x6a, 0x41, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e24}, 0x6e) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000003000/0x4000)=nil, 0x4000}, 0x1}) clone(0x0, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f00000000c0)) r2 = getpid() sched_setattr(r2, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x0, &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000fef000), &(0x7f0000000000)) sched_setaffinity(0x0, 0xfd39, &(0x7f0000000100)=0x5) clone(0x0, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000001000)) read(r0, &(0x7f0000000280)=""/100, 0x39f) 03:53:30 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2625cf547048ec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:30 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) ioctl(r1, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3, 0x802) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f0000000080)) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) 03:53:30 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:53:30 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:53:30 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_read_part_table(0x0, 0x0, &(0x7f0000000880)) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040)) 03:53:30 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0xc804000000000000}) 03:53:30 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x80000000000000}) [ 319.815789] device syz_tun entered promiscuous mode 03:53:30 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x6, 0x800000000) ioctl(r1, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) 03:53:30 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:30 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:30 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0xffffffff00000000}) 03:53:30 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RREADDIR(r0, &(0x7f0000000040)={0x49, 0x29, 0x2, {0x1, [{{0xc, 0x4, 0x8}, 0x100000001, 0x3f, 0x7, './file1'}, {{0x20, 0x2, 0x1}, 0x3, 0x0, 0x7, './file0'}]}}, 0x49) write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7, 0x21, 0x1}, 0x7) syz_read_part_table(0x0, 0x0, &(0x7f0000000880)) [ 319.847961] device syz_tun left promiscuous mode 03:53:30 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:53:30 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x300}) [ 319.915912] device syz_tun entered promiscuous mode [ 319.954777] device syz_tun left promiscuous mode 03:53:31 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x12}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000003000/0x4000)=nil, 0x4000}, 0x1}) clone(0x0, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f00000000c0)) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x82a02, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) clone(0x0, &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000fef000), &(0x7f0000000000)) sched_setaffinity(0x0, 0xfd39, &(0x7f0000000100)=0x5) fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000580)=0xe8) fstat(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r2, &(0x7f0000000700)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000002000)="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", 0x1000}], 0x1, &(0x7f0000000640)=[@cred={0x20, 0x1, 0x2, r1, r3, r4}, @cred={0x20, 0x1, 0x2, r1, r5, r6}, @rights={0x28, 0x1, 0x1, [r2, r2, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r1, r7, r8}], 0x88, 0x48041}, 0x10) clone(0x0, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000001000)) read(r0, &(0x7f0000000280)=""/100, 0xfef8) 03:53:31 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:31 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:31 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x1000000000002, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x5, @dev={0xfe, 0x80, [], 0xf}, 0x1}, 0x1c) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x400000, 0x0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r3 = request_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000440)='/dev/null\x00', 0xffffffffffffffff) keyctl$link(0x8, r2, r3) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x117, 0xb}}, 0x20) getsockopt$inet_tcp_buf(r1, 0x6, 0x1c, &(0x7f0000000480)=""/24, &(0x7f00000004c0)=0x18) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f0000000100), r4}}, 0x18) 03:53:31 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000340)=""/4096) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@dev}, &(0x7f0000001340)=0x14) syz_read_part_table(0x0, 0x3, &(0x7f00000002c0)=[{&(0x7f0000000080)="9ca417a0832432415280a6aa8f5ca33c1fdd7fbf01fdc6648c47f3fccd95a73cc039d53d878141568fefd89798f6212c2437852eed273caf12ab299f0b4d40baedcc72387dc9eef5222f305011b0816f360480bf3be5169460b15265f4d8fc92482eb9ef4613844ec1cca268baedee7e6ceaea9c7cf30e1eca2db22e05a10d569342ff6ed32a4466af0b19a399cda5b37ee41cbfd36f4b0f77378e8c48ae137114c5a5d5691c99f3a72b46b92ed735b90dc524648089405b4d20d30c03e21f4e875e8b1101d15ecb662bd3035c1c5df340fe61c5a76946bd01c9d56a0962", 0xde}, {&(0x7f0000000180)="eeb8243801eaaafd8f62cb1272ed55b25ac28b632d00595617502f074a2b2387c3f1ae8744e0db0b974ccda6ad2e58336ecae9d7a18e32072d639632", 0x3c, 0x9}, {&(0x7f00000001c0)="a33b1a020564118d05cf67940105da4bd24f7eb49470611613c1b961abbfe5c980e02861ed7ac93297abb09c3037c523fc98143b8547ab7f9e0dcf4f5cc95615ea2401f504c951dbfb75dca6d43ed8cd2dee8662ae94615262325d40ef2d57d330c49bc59ce0fa4d03948024746ee9b1d79b1e81c20e842eeaa163ea2983101df5ea80202e3c03119a1d9764d8047c61eb58c5d418c5b003a1e85e8e6ac7fdbced2827ff4fbc560bcdb88401879abcdb37394741cf1593aa1882b275cdb45535ac82db14", 0xc4}]) mkdir(&(0x7f00000013c0)='./file1\x00', 0x40) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000001380)=0x5) openat$vcs(0xffffffffffffff9c, &(0x7f0000001400)='/dev/vcs\x00', 0x0, 0x0) 03:53:31 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x3900}) 03:53:31 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) close(r2) 03:53:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:53:31 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0xfdfdffff00000000}) 03:53:31 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:31 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec487054cf252600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:31 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x80000000, 0x482000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e20, 0x80000000, @loopback={0x0, 0x1}, 0x2}}, 0x11, 0x4b, 0x1, 0x7f, 0xfff}, &(0x7f0000000080)=0x98) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000001c0)={r2, 0x471, 0x2, 0x200}, 0x10) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) 03:53:31 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) close(r2) 03:53:31 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000180)={0x40, 0x7}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000240)=@mangle={'mangle\x00', 0x1f, 0x6, 0x548, 0x1d8, 0x3a0, 0x3a0, 0x0, 0x1d8, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, &(0x7f00000001c0), {[{{@ip={@multicast2=0xe0000002, @local={0xac, 0x14, 0x14, 0xaa}, 0xffffff00, 0xffffffff, 'bpq0\x00', '\x00', {}, {0xff}, 0x5e, 0x2, 0x14}, 0x0, 0xe8, 0x118, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x2}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x5, @loopback=0x7f000001, 0x4e20}}}, {{@uncond, 0x0, 0x98, 0xc0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x98, 0xc0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x1}}}, {{@ip={@empty, @remote={0xac, 0x14, 0x14, 0xbb}, 0xff000000, 0xff0000ff, '\x00', 'nr0\x00', {}, {0xff}, 0xfb, 0x2, 0xc}, 0x0, 0xc0, 0x108, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x8}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@loopback={0x0, 0x1}, 'veth0_to_team\x00', 0xfffffffffffff00e}}}, {{@ip={@remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}, 0xffffffff, 0xff000000, 'team0\x00', 'ipddp0\x00', {}, {0xff}, 0x2e, 0x0, 0x29}, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz1\x00', 0x4, 0x4, 0x1, 0x2}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x0, 0x3}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x5a8) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000100)) syz_read_part_table(0x0, 0x0, &(0x7f0000000880)) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000080)={'raw\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000140)={0x3, 0x1, 0x5}) 03:53:31 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0xfcffffff00000000}) 03:53:31 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 321.598737] QAT: Invalid ioctl [ 321.707903] QAT: Invalid ioctl 03:53:32 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x12}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000003000/0x4000)=nil, 0x4000}, 0x1}) clone(0x0, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f00000000c0)) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x0, &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000fef000), &(0x7f0000000000)) sched_setaffinity(0x0, 0xfd39, &(0x7f0000000100)=0x5) clone(0x0, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000001000)) read(r0, &(0x7f0000000140)=""/100, 0x64) 03:53:32 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:32 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0xd000000}) 03:53:32 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet6_int(r0, 0x29, 0x13, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl(r1, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) 03:53:32 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) close(r2) 03:53:32 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x120) syz_read_part_table(0x20, 0xaaaaaaaaaaaab26, &(0x7f0000000880)) syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x7, &(0x7f00000014c0)=[{&(0x7f00000000c0)="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", 0x1000, 0xfff}, {&(0x7f00000010c0)="5bec808d7bbfc50718eb27d347fa70f2317222c77f61b6c48b5a175f8bb964f68170476b90031186ee7ad770cd3841c615b0fc0f03d25d04fe2deb2d4b58323b5d9dea5ee2d04c9a2f24d15484c30b21263273ebc5b8cc71d381b538d97f04bc1342a0fc2d96e8e55a10960931dfd49e47357c19812262acb5c149f09ba34b59b815f1abc7990d", 0x87, 0xe2}, {&(0x7f0000001180)="76d708786b7de6377df5ba08670a17ffb2d67dd72843d9647af08ecc30902a343dd56280588675ec42c9ee8e27c99fd9ae602482af99bf7577a0af10511b3e3f5c76d4e9c78908e6b6becf5da4e74f9820c4720cc7b1d1ee029388d37566869e0eaa8dbafc8ce2f7eba3fe89b58d3a00e4fc7dc8e5c83e77016cde110c0b07e15fce35d7c4135d66eb36703258c569de60e404b008f51faff53907304464c8363ffe", 0xa2, 0x4}, {&(0x7f0000001240)="ce7d5748d5c393d85db2f87ae3a7dba8e8e6e6dd1c614a8d1d39073737ee363824178aa3bf0854aae98fdaeb5360da43ec52aee3f02131b0ebb0c595d0a6f96e112cb4b91b54feef302537eb690e9765349d7734eff7dae290f254967ffd67e3f41a6edd108bc82a7bb196de76db9f5aea573712cc1132cea11ae62a321f792f54c5f88682b72ad19668c24bccc7e3538a1bae10abd2266ef1f72f0cb713b2d04de4e8caea9f58c5458c3b84bd244a57e7cd767c1d990695", 0xb8, 0xdf6}, {&(0x7f0000001300)="fb8dc7e5ae", 0x5, 0x7fffffff}, {&(0x7f0000001340)="0eb004aa5871760bf1154a675449846f5716b7a3ffbd02a813dd96fce8d1658cd9a335bbcde6e96a33cec6480ce6940fb62e2b5ade7df792b4a0e313a2775594882940f01802597a1418cbbba6fabcc95cf6850809a61ec592d2e909ba95b2f7b33d500f3f5deab97846dc5bb1a26bb4169fcf47690e6fa98528315bf73126d4b77f5d8b0424875396c504e02147ef3b6b9b636188a4804729163f2eddb2784f49011319ecc362d497ea51ad2482a42fa7112e6b0d6fec4b16efe2e3bae257c8075f8a645c01b7618bc919cbe4dcccef2a8f084b659fab4f1d", 0xd9, 0x4ad}, {&(0x7f0000001440)="b5ba7fed397241cf9c4d04a601a45cc74ca1d6de863499b96b971ec89cb3feeeb994c7bd580fe35d77a6a656bfc9c5507af3387f3b15e5a0756ee904e244e5ceb766b351d941e86f536ae5b05a6e738f61051972cd390253923854d39866feb8c1b32d53e47e30c24b71cd9e04388b74cc3e79ce90937bf81548848cc3", 0x7d}], 0xc, &(0x7f0000001580)={[{@quota='quota', 0x2c}, {@usrquota='usrquota', 0x2c}, {@nodiscard='nodiscard', 0x2c}, {@resize='resize', 0x2c}]}) 03:53:32 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:32 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:53:32 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:32 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0xd}) 03:53:32 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:32 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) bind$unix(r1, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e22}, 0x6e) 03:53:32 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:53:32 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 321.978824] resize option for remount only 03:53:32 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x1000000000000}) 03:53:32 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000180)=0x40) keyctl$describe(0x6, r1, &(0x7f0000000140)=""/25, 0x19) ioctl(r0, 0xa409, &(0x7f0000000080)="025cc83d6d345f8f762070") bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x1, @empty, 0x1}, 0x1c) 03:53:33 executing program 7: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)=',selfeth0system&bdevbdev,\\!system\x00'}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000140)=[{0xb, 0x1}], 0x1) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x12}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000003000/0x4000)=nil, 0x4000}, 0x1}) clone(0x0, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f00000000c0)) r2 = getpid() sched_setattr(r2, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x0, &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000fef000), &(0x7f0000000000)) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000180)=0x2, 0x2) sched_setaffinity(0x0, 0xfd39, &(0x7f0000000100)=0x5) clone(0x0, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000001000)) read(r1, &(0x7f0000000280)=""/100, 0x39f) 03:53:33 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:53:33 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:33 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:33 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x100, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) renameat(r0, &(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000100)='./file1\x00') creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x1, 0x0) syz_read_part_table(0x0, 0x0, &(0x7f0000000880)) 03:53:33 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0xfcffffff}) 03:53:33 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) poll(&(0x7f0000000040)=[{r0, 0xa000}], 0x1, 0x100000000) 03:53:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:53:33 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x900000000000000}) 03:53:33 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:33 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:33 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_read_part_table(0x100, 0x0, &(0x7f0000000880)) 03:53:33 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, [], 0xb}, 0x7}, 0x1c) ioctl(r1, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) 03:53:33 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:53:33 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_read_part_table(0x0, 0x0, &(0x7f0000000880)) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000001600)) sendmmsg$alg(r0, &(0x7f0000001f00)=[{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB="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"], 0x1160, 0x810}, {0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001200)="e04827a730ced26ca6d3cfa7fe462adff95a849f1cd20dd9c1702498a0828cced2f01d4799ea4ad4ac09a97235181241cd4f30f5bc9be396dc350430265aa3502c2b", 0x42}, {&(0x7f0000001280)="3dee3914abd452a8de29a512dc74107d129c75bbfc183c42d6", 0x19}, {&(0x7f00000012c0)="eb0730700525681e3cd34c6a21c6ed3b27ba34d96dc9e01cfed70c714242c340a6506a0afaaefbf81b98a8caac48506186c42cbe3fe219cb9facf49a34c755e882de201322cb921332460a3e3fd48ebfd4c977fb10d310593ce89687701fe4cd5949552f69587cbd7bfd0d3173130fd97f3473e4684e07af1360416ca6c31ca6b8c1ff0338132b965ad846a8df5b", 0x8e}, {&(0x7f0000001380)="ca", 0x1}, {&(0x7f00000013c0)="0172c49ed1d1c646da507d7a5a23267157f7469a2080b9d26e8662ab2d67751d19c43f711bd8a09ddecdac1dac633493c73ec35f40429527acede65971cb871b6b3618df49f55ed28518d5fc54760cd1d1f65966fc854563b2215942b35021ea36c0840b565be344cc30fc0fa5ffe061e82a0155a53d3c8490119926bf50047b013422490b3c1108e9b7f49ec69d4b91362d8c9921ed1d210f9e0af8f50ab749abb24d026f7c77a3568671e5e425fbdcb623", 0x4}, {&(0x7f0000001480)="981556", 0x3}, {&(0x7f00000014c0)="954ad8164a54b586eae5dbe1c44a4f5ad950a51b9a14720e37832b89fb8ed76a1b808cb5b8e0572ac879d7a9dcc08a0ee5152551e5ed084e84b92e71b5c0396853c92044d3505bf6b517d04c861168e3a424161ac8b670e35247ecc7119c1ee934c65472a2985feeffa662b8885a32a71040db082af9107e32208d3a8285f634733788882f5e1f14972774ea65f7f4cb9b16ab46f8645794cbbce44d0a3ceea61a30711ac5101dee98aa1d6a7c41c66a67cc5e8594994891678f5778fd2eb3ec", 0xc0}], 0x7, &(0x7f0000002000)=ANY=[@ANYBLOB="180000000000000017010000040000000080000000000000480000000000000017010000020000002e00000066ad601c309426f4924122c39b1e6d1db746bb7b1fd007e093ed7c86f2c86f2ffd22225136f9ae4921357d62e9a0000000000000300000000000000017010000020000001a00000050ca4c35b016f7c1990c59c9c045be952e93319625d9c41e7bc40000000000000000000017010000020000000000000058c144c70403000000e993190584be8d99c8ff1278f91f0a2f087f8721ae0000000000002800000000000000170100000200000010000000b57021c68cccd5ceeedfd8189f29610700000000"], 0xd0, 0x1}, {0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001700)="0623ea52d8c371f341858b37563676ac1611ab48319e84cd1daa5b6d2fa8b2a322f4647dc1482b03929050a8b733e3eae440b2", 0x33}], 0x1, &(0x7f0000001780)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x10001}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x9}, @assoc={0x18, 0x117, 0x4, 0x10001}], 0x90, 0x50}, {0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001840)="f88fde414a2f615827c2becec2ab9fd326dc1776b4aa66ca596a8eb61351173f23958a95413667153533ca9e234fb04dcd12fac6fbb1b30dd0d9ab30199b0c8199e9238b233221a2c4643d51c48e594e038906f27badad58db7a67627c8accd4501c257eec65be73e059c4f57561d544aa78adff6a0c6c3de7f5f7e1fa5f1dfb49455515d72281365b1e6583fa1abea4cbbce52ac99a7df9dcf45e40", 0x9c}, {&(0x7f0000001900)="f96d65bf8c2a1867041b6b713a8c4782169f24a5d4cbeb50cf9ca0db32ee6be5dc12a83c1a9ca8f2c7cf1734379a240d6af1b708bffdf7d77b4f629d2aef4ee1eb29f85d4f7eff564fe904e2eb9cb887123f1096ce4d8d142390411e25409e40a472bae071fe4745ed6232fbaa8561d32b456518d4b192a5261770f80e44e02b8f44f73df7e02d248db8114631a052323a4c0578082d2ea12467bb97eb52f955f6c08da81b25c00b30e52d5e132db60fd080b9217252e94346b8c9384e", 0xbd}, {&(0x7f00000019c0)="b859f565aecffe56d3427914c0c8729f6a30e604c237ea8e0954561dfec341363bcc3d1109fd4299b39ed3cd3f6df40fae4be9717134f36f3b2386336a4dcc305b36ee38f1b1776b", 0x48}, {&(0x7f0000001a40)="181849121686e539193e6c9f201794eef7e3dba037af69d44d99d3eff60168b3b83c26f24d3e363211c2bf33db35b44b91905df3ccc8b73e001691cddd78bc9227a266b5dfff03520cf0842a254ded362702a40c4ca3b9a2bf1ed1c9d5", 0x5d}, {&(0x7f0000001ac0)="67fc54b31167c52a77fba8318d8710f38e1e01b6c8c82fbd405bee18bbf7a6f623e85f9bfba0d531d34777db28db21dfa5441ab370e24876c144649925c426f76a6be31e75a1e885fab1e0a70358c39e84fd1ffdffadf1a8acc8109763bc824a9b6e7b8807114ee88c80d27d2584a8bc9d9ce3a376dbc3", 0x77}], 0x5, &(0x7f0000001bc0)=[@iv={0xa8, 0x117, 0x2, 0x8f, "577821f51e8989e89ce691e78999500bcff8f44cc06eac786f878f1c2fe4d294fc572691dee7ea70bc125b8aaa39783ee32c251843399380ac8ea053b9893563ea8c85d507cf50a8d0159985ae7ec547d25a026da59aad3307edac5c317b5617d50bfdb7eba7aff5e0eee6865b09bdfbbb9678f5b56f1c01a7de9cf971b8cc7caf428c5209a2983c3153cfba58c765"}, @iv={0xc8, 0x117, 0x2, 0xb4, "253f1307d787a17d4ca13c2038c2cd3579d8c3a5533850ecd599aef864ae15b2cf21468585898b4982c05bcba4c659283270c9a927054f286a5ab6d2da33e7b3d94987ab89095f14e28df8b59251a54b9eb100b6f8c98260811ced11e0e449f562a8610b668acce83cdd2c83beca5d53a83674afe21543c90dfe02afcc84bc861a465cda20753b963c88a817426c308f042431eecdbfa625965f9de80644e7e59b6c4aa820381305cab5800fe8483c3aff689158"}, @iv={0x108, 0x117, 0x2, 0xf2, "4bf9d13abd4c6c4e7995d92c25cd13ea075165c2bf87c3896b0da14073da1b28179bf745a3ed8b0b4546203d1f12fdc2114a1d7594fb6e732682d50eceb92e172ec3d513af256c9dc6d77a49ed7d3974e0bda308f29a54e99e1dd8f8502ecad5e0b37eb2fedf6b9e03eac5695303470519a3149ac589318c8d6f6148e8ec3a688a4dd5cd4b50cfeba7156897cc4d3352f3e10c1ad4a3a408572b4045dc5f9b70243f5989a0e71fd8b63f2ccf026dc092b21dc278db299bdbefeb8590c1a7612ba11a1024a45fe6a57f324e7a8f6252f78b3fcf426749f249e27d84b140f99616231c373988be46c4f42d882151eccc6d97cd"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x80, 0x117, 0x2, 0x6a, "3036dac530284a61ed5635528c0ecce5f79c0475fb7037b502a226b64ca4e56f6eb463b50d6afa7beedaff12cb57bb7db7ce10eceb49a2b834cbdc1738e9e231d625082890ce0f1d9cf457edd3df9b993fc60fa24e65bdb8817d5f49130ff8239cde4a9a954e4e0d656c"}, @op={0x18, 0x117, 0x3, 0x1}], 0x328, 0x4040010}], 0x4, 0x8004) 03:53:33 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x3}) 03:53:34 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x12}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000003000/0x4000)=nil, 0x4000}, 0x1}) clone(0x0, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f00000000c0)) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x0, &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000fef000), &(0x7f0000000000)) sched_setaffinity(0x0, 0xfd39, &(0x7f0000000100)=0x5) socket$inet6_udplite(0xa, 0x2, 0x88) clone(0x0, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000001000)) read(r0, &(0x7f0000000280)=""/100, 0x39f) 03:53:34 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000100)=""/151) 03:53:34 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:34 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:34 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0xfffffffc}) 03:53:34 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:53:34 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:53:34 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_read_part_table(0x800000000000000, 0x0, &(0x7f0000000880)) r1 = request_key(&(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000001c0)='%**^\x00', 0xfffffffffffffffd) add_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000000c0)="a073282baa90c3d8bc8d4b364dc0ac4d53798188e79421fabdbcf9f57e160bf48009159419c6356b49da92f38a9401c1dddb986eb30566c6e9f3430c88697d5f45c4b62c6dd4b0df76068f8f76e839e2cc3c787b59", 0x55, r1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x1510, 0x150, 0x1280, 0x1388, 0x1280, 0x0, 0x1478, 0x1478, 0x1478, 0x1478, 0x1478, 0x5, &(0x7f0000000200), {[{{@ip={@multicast1=0xe0000001, @remote={0xac, 0x14, 0x14, 0xbb}, 0xff, 0xffffff00, 'bridge_slave_1\x00', 'syzkaller0\x00', {0xff}, {}, 0x73, 0x2, 0x10}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x200, 0x145}}, @common=@ttl={0x28, 'ttl\x00', 0x0, {0x1, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="44f01448c33a", 0x100000000, 0x10, [0x19, 0x1d, 0x23, 0x10, 0x8, 0x17, 0x33, 0x1a, 0x3f, 0x34, 0x33, 0xe, 0x16, 0x2d, 0x21, 0x2b], 0x0, 0xfffffffffffffffa, 0x1}}}, {{@uncond, 0x0, 0x10f8, 0x1130, 0x0, {}, [@common=@unspec=@cgroup1={0x1030, 'cgroup\x00', 0x1, {0x1, 0x0, 0x1, 0x0, './cgroup.net/syz0\x00', 0x4, 0x4}}, @common=@ah={0x30, 'ah\x00', 0x0, {0x80000000, 0x7, 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x2, @multicast1=0xe0000001, @multicast1=0xe0000001, @gre_key=0x1, @icmp_id=0x67}}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@inet=@set1={0x28, 'set\x00', 0x1, {{0x0, 0x3, 0x1}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv4=@rand_addr=0x800, @ipv6=@dev={0xfe, 0x80, [], 0xf}, @port=0x4e21, @icmp_id=0x64}}}, {{@ip={@rand_addr=0x81, @rand_addr=0x1b2000, 0x9455735a56785275, 0xffffffff, 'vlan0\x00', 'bridge0\x00', {0xff}, {}, 0x0, 0x1, 0x8}, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @multicast1=0xe0000001, @remote={0xac, 0x14, 0x14, 0xbb}, @gre_key=0x7, @port=0x4e21}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x1570) 03:53:34 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x39}) 03:53:34 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:53:34 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:34 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x80006, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x8, 0xc8000) fcntl$dupfd(r1, 0x0, r2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1000}}, 0x20) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x800, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f00000002c0)={0x6, 0x31a4, 0x4, 0x750, 0x3, 0x5418, 0x6, 0x1, 0x5, 0x7fff, 0x9, 0x5}) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r3, r4}}, 0x18) getsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f0000000240)=""/48, &(0x7f0000000280)=0x30) ioctl$BLKDISCARD(r4, 0x1277, &(0x7f0000000200)=0x5) ioctl(r1, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0xfffffffffffffffc, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) 03:53:34 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 324.004613] device syz_tun entered promiscuous mode [ 324.013732] device syz_tun left promiscuous mode 03:53:35 executing program 4: r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffff9c) creat(&(0x7f0000000080)='./file0\x00', 0x0) epoll_wait(r1, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}], 0x6, 0x6) syz_read_part_table(0x0, 0x0, &(0x7f0000000880)) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) 03:53:35 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x6000000}) 03:53:35 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 324.094384] device syz_tun entered promiscuous mode [ 324.125503] device syz_tun left promiscuous mode 03:53:35 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:53:35 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x12}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000003000/0x4000)=nil, 0x4000}, 0x1}) clone(0x0, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f00000000c0)) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x0, &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000fef000), &(0x7f0000000000)) r2 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'erspan0\x00', {0x2, 0x4e23, @multicast1=0xe0000001}}) sched_setaffinity(0x0, 0xfd39, &(0x7f0000000100)=0x5) clone(0x0, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000001000)) read(r0, &(0x7f0000000280)=""/100, 0x39f) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = geteuid() fstat(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r3, r4, r5) 03:53:35 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x1000000}) 03:53:35 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") write$binfmt_elf32(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x6ef5, 0x8, 0x5, 0xff, 0xffff, 0x3, 0x7, 0x1ff, 0x303, 0x38, 0x1e0, 0x2, 0x4c7f, 0x20, 0x1, 0x3, 0x7, 0x8}, [{0x6474e555, 0x9d, 0x4, 0x4, 0x6, 0x4}], "e31956b134aadd79631962830650e3580a7d075f0f2be3a3b00f45f57d7ca47cabdb0f74eb49cc8fd966e41661488e676c706c3250dc9b5c785a20f6b7da7ca723bfd326837e80d7f330639660b0181f1eb85fa183b2e9", [[], [], [], [], [], [], [], [], []]}, 0x9af) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) prctl$setfpexc(0xc, 0x40000) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x3, 0x10, 0x100, 0x2}, &(0x7f0000000080)=0x18) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x5, &(0x7f0000000100)={r2, @in6={{0xa, 0x4e24, 0x2, @remote={0xfe, 0x80, [], 0xbb}, 0x40}}}, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) 03:53:35 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:35 executing program 4: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4) syz_read_part_table(0x0, 0x0, &(0x7f0000000880)) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x9, 0x4) 03:53:35 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:53:35 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2625cf541fffe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:36 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:36 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0xfd, &(0x7f00000000c0)="8a54f62870") accept$inet6(r0, 0x0, &(0x7f0000000040)) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) 03:53:36 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0xf6ffffff}) 03:53:36 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:36 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_read_part_table(0x0, 0x0, &(0x7f0000000880)) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000040), 0x4) [ 325.068270] device syz_tun entered promiscuous mode [ 325.082841] device syz_tun left promiscuous mode 03:53:36 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(0xffffffffffffffff) 03:53:36 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:36 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) 03:53:36 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x40000000}) [ 325.175517] device syz_tun entered promiscuous mode [ 325.213960] device syz_tun left promiscuous mode 03:53:36 executing program 7: r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x12}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000003000/0x4000)=nil, 0x4000}, 0x1}) clone(0x0, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f00000000c0)) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) socketpair$inet_sctp(0x2, 0x0, 0x84, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000fef000), &(0x7f0000000000)) sched_setaffinity(0x0, 0xfd39, &(0x7f0000000100)=0x5) clone(0x0, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000001000)) read(r0, &(0x7f0000000280)=""/100, 0x39f) 03:53:36 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:36 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x400, 0x8275}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r1, 0x9, 0x4}, &(0x7f0000000140)=0xc) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open$cgroup(&(0x7f0000000380)={0x4, 0x70, 0x100, 0x3, 0x4, 0xffffffff80000000, 0x0, 0x3, 0x400, 0xc, 0x4c1, 0x20, 0x0, 0x638, 0x80000000, 0xfffffffffffff48e, 0x3, 0x2, 0x0, 0xa9, 0x8001, 0x2b, 0x40, 0x6, 0x0, 0x8000, 0x3, 0x9a, 0x2, 0x9, 0x5, 0x8001, 0x9, 0x80, 0xf, 0x81, 0xa3a0, 0x10000, 0x0, 0xfffffffffffffff8, 0x2, @perf_bp={&(0x7f0000000340), 0x4}, 0x80, 0xffffffffffff7fff, 0x101, 0x2, 0x4, 0x2, 0x2}, r3, 0xc, r3, 0x8) syz_read_part_table(0x0, 0x0, &(0x7f0000000880)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000280)={r1, @in6={{0xa, 0x4e24, 0x4, @local={0xfe, 0x80, [], 0xaa}, 0x2}}, 0x5, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000180)={r2, @in={{0x2, 0x4e21, @multicast2=0xe0000002}}, 0x10000, 0xd89e000000000, 0xfffffffffffffffd, 0x3, 0x1}, &(0x7f0000000240)=0x98) 03:53:36 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0x6, 0x6, 0x3f, 0x42b}, 0x8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) 03:53:36 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:36 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0xd9000000}) 03:53:36 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r1) 03:53:36 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:53:37 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r1) 03:53:37 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="beaa1fd946b9088112848e54"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_read_part_table(0x0, 0x0, &(0x7f0000000880)) 03:53:37 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:37 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x2000, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r0, r1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000100)={{0x1, 0x101}, {0xf27867e, 0x20}, 0x6, 0x5, 0xee3}) 03:53:37 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:37 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x3000000}) 03:53:37 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) set_tid_address(&(0x7f0000000040)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x400, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000200)={'broute\x00', 0x0, 0x3, 0x83, [], 0x3, &(0x7f0000000100)=[{}, {}, {}], &(0x7f0000000140)=""/131}, &(0x7f0000000280)=0x78) 03:53:37 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2ff1f54cf252600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:38 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x12}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000003000/0x4000)=nil, 0x4000}, 0x1}) clone(0x0, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f00000000c0)) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x0, &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000fef000), &(0x7f0000000000)) r2 = accept4(r0, &(0x7f0000000140)=@nfc_llcp, &(0x7f0000000000)=0x80, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000240)=0x20) setsockopt$inet6_tcp_buf(r2, 0x6, 0x1d, &(0x7f00000003c0)="8b29afb914bc5eb822acc4bad5bce9cf7a15eb8071f5de8062b26274cfda72b117ea6ed3eff9620f09e02c56657ae6f4a58ffec6aabcc6488b0cd0d9a38614bd321e577534532b7400a8fec4f34f9ae8dff4920033dac596a9edb415e051580936237c9fad40a2af3cd3c8cb4b97407dff6cf591bc5a29109dbecf6db4f7282f7f1c68582dc8a7ab3a6f2337c93f7a55eef8ab15d0997e865d652b53eefaf900b0acbb151156e0146875322cb86ad42e4af7ffcaa1bf2a75", 0xb8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={r3, 0x7}, 0x8) sched_setaffinity(0x0, 0xfd39, &(0x7f0000000100)=0x5) move_pages(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000003000/0x4000)=nil], 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x4) clone(0x0, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000001000)) read(r0, &(0x7f0000000280)=""/100, 0x39f) 03:53:38 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:38 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0xd00}) 03:53:38 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r1) 03:53:38 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) pipe2(&(0x7f0000000040), 0x84800) 03:53:38 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:38 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x9c}, {0x6}]}, 0x10) write$FUSE_GETXATTR(r0, &(0x7f0000000040)={0x18, 0x0, 0x6, {0x1ff}}, 0x18) syz_read_part_table(0x0, 0x0, &(0x7f0000000880)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, 0x6, {0x7, 0x1b, 0xc376, 0x400, 0x4, 0x7fff, 0x0, 0x3}}, 0x50) ioctl$sock_ifreq(r1, 0x8927, &(0x7f0000000140)={'sit0\x00', @ifru_data=&(0x7f0000000100)="6d33a60854273d2f0f269da0d9769ec70c4a0fdf95852d0b47bc6b6a36a0c2ba"}) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000340)=[0xee01, 0xffffffffffffffff, 0xee01, 0xee01]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x100000, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}, 0x2c}, {@blksize={'blksize', 0x3d, 0x400}, 0x2c}, {@default_permissions='default_permissions', 0x2c}]}}) 03:53:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:53:38 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x600}) 03:53:38 executing program 6: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r1) 03:53:38 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:38 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:38 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x7, 0x0) ioctl(r1, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt(r2, 0x8906, &(0x7f0000000200)="42dc75389913d4ae395a7b9cd58835caa1bc7c2bbffcda843d33a0eb294f5ea773f2435da0877802b14bfebc383c975f7d3e623b3e1cd14dbe80aab245fb723fd0a77cceefd027b1e5e76430a1a01ce204cb939d993f552af953fc3dc29ac0824b7fb253f647f87744541ad4c1afdd613e98e5fc21852c84b21924badf97e894be50f5b506e452318012ce226be199393b50c8c3ea5f432a2ffc85077866856bd69c204622133621bcaf53ad3eb18c8cead1acbccc1adc89f04b2c6dc90e24a551d0836a2bc57686ddbe264ab9455f937d7eeb4914f1c320f97c8ca4613eeca2db33718b32e09022") r3 = accept4(r1, &(0x7f0000000040)=@nfc_llcp, &(0x7f0000000100)=0x80, 0x0) getsockopt$nfc_llcp(r3, 0x118, 0x6, &(0x7f0000000140)=""/156, 0x9c) 03:53:38 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x4c8}) [ 327.182104] device syz_tun entered promiscuous mode 03:53:38 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_read_part_table(0x0, 0x0, &(0x7f0000000040)) syz_read_part_table(0xc7, 0x4, &(0x7f00000012c0)=[{&(0x7f0000000040)="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", 0x1000, 0x20}, {&(0x7f0000001040)="053d29fb6a086e131ffa0f7315aa6cf38c5edd74639f3bc979f449551c0a4756511bbeb5a349f6be35a2bc235895c7a304b792437472e707be89bd52209ce21a82b39885bdee6e5f0a359e7de62816c423832e792a28c398d2cb230813dd031ccd6c932b38798e70c74fe959e13c6754cddd35f0e1343c1960c869860dad786a6321b7dc32c5", 0x86, 0x9}, {&(0x7f0000001100)="584e0cf8bd94b678148030edc2a4e14e41c8c753a08285eadbd224d6496165fc8f532b29f9f6c62a9b167413a1de5d695de43537d52b554a2ef874e08595f2812858f5b3d1480c36a5cfcba87a67d3d5808ff1ec88dc8cf8cd2bd74475e23cdf39a7876566ca29f99d5515da047b80f4212f92bf92c4c67a57e5726f255a6c2a6e51592900084c113a5ffbf9bfb9b6bc0b36247f99a15c6613cc74f964b18847d620763aa2ec1c715c7cde9490edd4ea34838ebf034859a108a0bafd", 0xbc, 0x4000000000}, {&(0x7f00000011c0)="945f1edf6965e4ce393756817450bb3abc85b9bc4d342c5f993a3a4101a9e58f96619769c6b1dd4defe82a00313b4f434319622e0ea17dbefb80457d6f17428e4d1cdf129e278e4235f23500c0d5dce9adef05ea1aad3de2a26cd5d744cde78da59b56fe2cd9a2ebe04b5d8187bd30a958bbbe5f60292cc8ac16a9cb7e23d17c836f53a6c31395ceade6aed6778d0e1b6c02910db5bf2a247602421a4b3c44acd5bd47c23c754141e8389b8e70fa0d39d2d4d49b1004d10eff2ac8630f48e46edfe42e9b54d388c1378a89a43e9276fb3a384ad213f1b8419592668b124b5c767c644af207e3c8eb1578ae1d38f508657f6613", 0xf3, 0x5}]) 03:53:38 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 327.222487] device syz_tun left promiscuous mode 03:53:39 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x300000000000000}) 03:53:39 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2625cf547048ec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:39 executing program 6: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r1) 03:53:39 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:39 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000003000/0x4000)=nil, 0x4000}, 0x1}) clone(0x0, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f00000000c0)) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x0, &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000fef000), &(0x7f0000000000)) sched_setaffinity(0x0, 0xfd39, &(0x7f0000000100)=0x5) clone(0x0, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000001000)) read(r0, &(0x7f0000000300)=""/100, 0xfffffffffffffe96) 03:53:39 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="025cc83dac15a77d9debdf439736c9e9cf0eac8a15d1d7070b00000000000000000000000000000000001700ea182a394e204faf00dc989b2bb05bc9c0fa9496d6fed3dd59629027261ef2fd1bf9d3c9f3c1c549c6ea47eef12cd2cf9f3ef2a4b2adb55bcbbdb69ec8d58d0aa90548b8f385293624e0c719b355223ba0275a80162705fdae71c38ff3fd5624eb7f5f3c7bb9ff11681c7de8afd3b51dc651306395a1ca9c37aea10505cc14599f92a89ee438c4e10108883607f9e9dd57f8f51a78e46a5b3883d017da033a0b4da01adc0050d0a1174aeacde5968d09a95d3c3b22dd0bf43d33ed30cf09c2a53b54068094fc4a78f28437969faead001863bab5fc74fcdb840a7d6783649315d70d9508368837f64aee5012c9c665d48ca81a272e0b10c52ccdabb6a4d0ee25c6f0ef41182a6e8d2f539258a61e94f041e0696c1c924689f7d60c799a066328d6eccf366308269462d4ce43cf307970b2e1985ac8e39b1dbc18d358062661b1731648ef62e3702f6f27b6f555feac71930754151c0637c949c5d69576732fdb984dfe4459aeb9666a4dc19a0379e604a9bb337e9bf77cb3d5b1607828ac2e38d7fc2d35bb1e1cc386be9a890bf2e00ed42c2beda5e11b958210e2a812befd5116506a0eed7f5d6fe4ede1926b65a907450d61c186ebdb1aca27875f06cdf8670749800345418adecf1d6d2986b473800a3cb1710c46520a36cb94bc02627d9bf70c5ecefd5c3752fcd50d61c67add92e2f966e8bf60a753db983cbd952d02f29f9f54a9647a4afa5ea0d69f450f93406639dc9788") getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000380)={0x0, 0xe6, "3a3a69adf6f0a866edf99a667c3cc5e04d3f44608c5915cb407eb7452492ebbf07250a39dba9129004bfbaf6da17b3ebf0f9bf74bb89793bec4750e8eb893f8af1b0f20e09852420eb896f90848f0af2732704c42da0939dcb14ce4be8ce60327d43203a7e583f3fbdacf2286fc8bda7e149b4f7127e2a24db7edfc1600357e365c4ae7f28fb531cb1c29374eedf0e3ff63e197fe1f592ae91e398899e10410b848c51e65c67df1fed0e40d09f4069cdb296079950fc677307b69a0d56bacfe43d2dd8bf0273a60256a15e11f3d0171a8f05966c61bfb7954e3832910987fd1d06d70ef88f22"}, &(0x7f0000000040)=0xee) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000480)={r2, @in={{0x2, 0x4e23, @multicast1=0xe0000001}}, 0x33f, 0x101}, 0x90) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) 03:53:39 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_read_part_table(0x0, 0x0, &(0x7f0000000880)) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000080)={0xffffffffffffffff}, 0x4, {0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, [], 0xc}}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000100)={0x11, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x10000, 0x1, 0xff, 0x54, 0xfffffffffffeffff, 0xffffffff80000001, 0x6}, 0x1c) 03:53:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:53:39 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x600000000000000}) 03:53:39 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 328.237726] device syz_tun entered promiscuous mode 03:53:39 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) 03:53:39 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:39 executing program 4: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x18) syz_read_part_table(0x0, 0x0, &(0x7f0000000880)) write(r0, &(0x7f0000000040)="b5fa39c68e77bb49693bc9a43fbdef11fd878eaba0949c428d91169db678f68d349d3a4c866c4fce529f14a207258486cbaf237aa68de6acedc8575083e21390e42f5ba82394604b8aa24e352be19c24063099fe6fb2851873ec5c9326474580ba9a352e5d94c8b30d572a0bb1fc34464743466ef0a1de9932a86867e61a0338e452085c181ede273ece5158e7c4c05a6f2fa960b0fb070af7dc5a6c446ca77a60dd02f27fb5ba9f0e9a62bbe70d2fa08c957dcf95e8e4d137bd7f05b6a25060ddeaf5010de9d0826257dc296678c283a222c7c673b791510000c496400624b8e29b547765775bf476", 0xe9) 03:53:39 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x200000000000000}) [ 328.280143] device syz_tun left promiscuous mode 03:53:39 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x589040, 0x0) accept4$alg(r2, 0x0, 0x0, 0x80000) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) rt_sigreturn() 03:53:39 executing program 6: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r1) 03:53:39 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:39 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2ff1f54cf252600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:39 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x2000000}) 03:53:39 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r0, r0) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x1, &(0x7f00000000c0)="025cc83d6d345f8f762070") bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) [ 328.384397] device syz_tun entered promiscuous mode [ 328.433717] device syz_tun left promiscuous mode 03:53:39 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x12}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000003000/0x4000)=nil, 0x4000}, 0x1}) clone(0x0, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f00000000c0)) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x0, &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000fef000), &(0x7f0000000000)) sched_setaffinity(0x0, 0xfd39, &(0x7f0000000100)=0x5) clone(0x0, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000001000)) read(r0, &(0x7f0000000280)=""/100, 0x39f) mount$9p_xen(&(0x7f00000000c0)="0e6d696d655f74797065776c616e316264657600", &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000240)={'trans=xen,'}) 03:53:39 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:39 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x1, 0x6}, 0x10) syz_read_part_table(0x0, 0x0, &(0x7f0000000880)) 03:53:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:53:39 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x4000}) 03:53:39 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r1) 03:53:39 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:39 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) write$P9_ROPEN(r1, &(0x7f0000000080)={0x18, 0x71, 0x1, {{0x10, 0x100, 0x7}}}, 0x18) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x80000001, &(0x7f0000000180)="6d76f10c0000000055062bf910d17e204b1999d647b3191e40c043518b6fb702515f3f751d2fc09afd111ae02858ecaff8a2b9bc7eb09162c5474e0589f53e9d1b07e57fb97f398e0227382b651f86871fbb7a47") bind$inet6(r0, &(0x7f0000000140)={0xa, 0xfffffffffffffffe, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) 03:53:39 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:39 executing program 4: r0 = add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000002c0)="e9a4097b3980c5b02caaf17f44f53f62e592c1da3f52be92d181d52dcd554ab068f8e35ee85fce59602e2b74c15eb0ea4ea2f6e03cae5d0080c6c2f11a4ef735930ad8b4f03e3a7602da1124e51f729adb7615ce87e4dc3a7f9b6f4614d29046a087f57a3f8dadfa0fcd0b6e8f8dfcdb6cdfdb274ca008d74d5f", 0x7a, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000340)=""/63, 0x3f) syz_mount_image$ceph(&(0x7f0000000040)='ceph\x00', &(0x7f0000000080)='./file0\x00', 0x5, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="fa920445d41563dc016d34bbb50d9554cbc94f599e2f9551caa03580855ad4fc374c2cd600cfbde911457dc2eff95f99df4ec58a9628124918c10329eddbf2702a9760f30600833f0b50b349d55424b0cc020f35eb83b3235eaf0da29aca998d5f1f107769e0c8e2d2f92d44044570b5cc150921a5bd7b8c50165a450c9e46523d7bd7992307f97a832bdbc4e04fe286a02566c9230a1701fec6dc4235e709f0b2bc97db05f9625b81280309356d", 0xae, 0xffff}, {&(0x7f0000000180)="ab", 0x1, 0x24f}], 0x10, &(0x7f0000000200)='\x00') r1 = creat(&(0x7f0000000000)='./file0\x00', 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000380)={0xffffffffffffffff}, 0x117, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x3ff, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0xffffffffffff5994}, {0xa, 0x4e20, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0x3}, r2, 0x2}}, 0x48) syz_read_part_table(0x0, 0x0, &(0x7f0000000880)) 03:53:40 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:40 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x400000, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x4, @mcast1={0xff, 0x1, [], 0x1}, 0x8}, @in6={0xa, 0x4e24, 0x80, @mcast1={0xff, 0x1, [], 0x1}, 0x8}, @in={0x2, 0x4e23, @rand_addr=0xff}, @in={0x2, 0x4e23, @multicast2=0xe0000002}], 0x58) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f00000001c0)={0x4, 0x99e, 0xfff, 0x3, 0x100000000}) ioctl(r1, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e21, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x80000000}, {0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, [], 0x1e}, 0x7}, 0x400, [0xfc, 0x20, 0x6, 0x5423, 0xffffffffffff8001, 0x7ff, 0x6, 0x3b4]}, 0x5c) 03:53:40 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0xd9}) 03:53:40 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 329.079661] device syz_tun entered promiscuous mode [ 329.096196] ceph: device name is missing path (no : separator in /dev/loop4) 03:53:40 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0xd00000000000000}) 03:53:40 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 329.128401] device syz_tun left promiscuous mode 03:53:40 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x12}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000003000/0x4000)=nil, 0x4000}, 0x1}) clone(0x0, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f00000000c0)) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) r3 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x22200) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000140)={0x0, 0xffffffff}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000240)={r4, 0x4, 0x1, 0x29}, &(0x7f0000000300)=0x10) clone(0x0, &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000fef000), &(0x7f0000000000)) r5 = dup2(r0, r0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x73a8, {0xfffffffffffffff9, 0xf44, 0xfc22, 0xad5, 0x7, 0x7}, 0x8, 0x200}, 0xe) sched_setaffinity(0x0, 0xfd39, &(0x7f0000000100)=0x5) clone(0x0, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000001000)) read(r2, &(0x7f0000000280)=""/100, 0x1e0) 03:53:40 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r1) 03:53:40 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x8000e, 0x8000000000) ioctl(r1, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") socket$inet6(0xa, 0x0, 0x6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) [ 329.593941] device syz_tun entered promiscuous mode [ 329.611359] device syz_tun left promiscuous mode 03:53:40 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:53:40 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0xd900000000000000}) 03:53:40 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:40 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000040)=""/248) syz_read_part_table(0x0, 0x0, &(0x7f0000000880)) 03:53:40 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:40 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0xffffffffffff, 0x3) ioctl(r1, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r2 = socket(0x8, 0xa, 0xf5) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@remote, 0x0}, &(0x7f0000000080)=0x14) sendmsg$can_bcm(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x1d, r3}, 0x10, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000000100000009048f133854075ab6b6d3000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000c001000000020000000202000095b6dfdb57273028"], 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) 03:53:40 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r1) 03:53:40 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x300}) 03:53:40 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0xfffffffffffe, 0x0) recvfrom$inet6(r1, &(0x7f0000000100)=""/167, 0xa7, 0x23, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, [], 0x11}, 0x1}, 0x1c) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000002c0)={0x0, 0x1bc, 0x7, 0x3, 0x7, 0x1, 0x15, 0x9, {0x0, @in={{0x2, 0x4e23, @loopback=0x7f000001}}, 0x80, 0x3f, 0xfd2, 0x44, 0xbca50}}, &(0x7f0000000380)=0xb0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000080)={r2, 0x100}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x23, 0x600000000000, 0x0, 0x1, 0x10001, 0x1c0fbef2, 0xbbfc, 0x7fffffff, r3}, &(0x7f0000000240)=0x20) ioctl(r1, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) 03:53:40 executing program 6: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:53:40 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_read_part_table(0x0, 0x0, &(0x7f0000000880)) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') accept4$packet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000003c0)=0x14, 0x800) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000400)={@mcast1, 0x0}, &(0x7f0000000440)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000004c0)={0x0, @multicast2, @multicast2}, &(0x7f0000000500)=0xc) getsockname$packet(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000580)=0x14) recvmmsg(r0, &(0x7f0000006b40)=[{{&(0x7f00000005c0)=@xdp, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/32, 0x20}, {&(0x7f0000001680)=""/150, 0x96}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/194, 0xc2}, {&(0x7f0000002840)=""/106, 0x6a}, {&(0x7f00000028c0)=""/211, 0xd3}, {&(0x7f00000029c0)=""/132, 0x84}, {&(0x7f0000002a80)=""/24, 0x18}], 0x9, &(0x7f0000002b80)=""/13, 0xd, 0x9}, 0xfffffffffffffffd}, {{&(0x7f0000002bc0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000003ec0)=[{&(0x7f0000002c40)}, {&(0x7f0000002c80)=""/102, 0x66}, {&(0x7f0000002d00)=""/217, 0xd9}, {&(0x7f0000002e00)=""/39, 0x27}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000003e40)=""/116, 0x74}], 0x6, &(0x7f0000003f40)=""/118, 0x76, 0x800}, 0x10}, {{&(0x7f0000003fc0)=@ax25, 0x80, &(0x7f0000004300)=[{&(0x7f0000004040)=""/7, 0x7}, {&(0x7f0000004080)=""/103, 0x67}, {&(0x7f0000004100)=""/201, 0xc9}, {&(0x7f0000004200)=""/207, 0xcf}], 0x4, 0x0, 0x0, 0x7ff}, 0x5}, {{&(0x7f0000004340)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f00000043c0), 0x0, &(0x7f0000004400)=""/209, 0xd1, 0x7}, 0x6}, {{&(0x7f0000004500)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @local}}}, 0x80, &(0x7f00000067c0)=[{&(0x7f0000004580)=""/5, 0x5}, {&(0x7f00000045c0)}, {&(0x7f0000004600)=""/65, 0x41}, {&(0x7f0000004680)=""/4096, 0x1000}, {&(0x7f0000005680)=""/185, 0xb9}, {&(0x7f0000005740)=""/124, 0x7c}, {&(0x7f00000057c0)=""/4096, 0x1000}], 0x7, 0x0, 0x0, 0x200}, 0x7fff}, {{&(0x7f0000006840)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000006940)=[{&(0x7f00000068c0)=""/61, 0x3d}, {&(0x7f0000006900)=""/61, 0x3d}], 0x2, &(0x7f0000006980)=""/84, 0x54, 0x3}, 0x80000000}, {{&(0x7f0000006a00)=@vsock={0x0, 0x0, 0x0, @host}, 0x80, &(0x7f0000006b00)=[{&(0x7f0000006a80)=""/96, 0x60}], 0x1, 0x0, 0x0, 0xff}, 0x7}], 0x7, 0x12102, &(0x7f0000006d00)={0x77359400}) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000006d40)={@dev, 0x0}, &(0x7f0000006d80)=0x14) getpeername$packet(r0, &(0x7f0000006e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000006e40)=0x14) clock_gettime(0x0, &(0x7f0000009440)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000093c0)=[{{&(0x7f0000006e80)=@ll={0x0, 0x0, 0x0}, 0x80, &(0x7f0000006f00), 0x0, &(0x7f0000006f40)=""/248, 0xf8, 0x9}, 0x1}, {{0x0, 0x0, &(0x7f0000009300)=[{&(0x7f0000007040)=""/2, 0x2}, {&(0x7f0000007080)=""/4096, 0x1000}, {&(0x7f0000008080)=""/227, 0xe3}, {&(0x7f0000008180)=""/143, 0x8f}, {&(0x7f0000008240)=""/4096, 0x1000}, {&(0x7f0000009240)=""/158, 0x9e}], 0x6, &(0x7f0000009380)=""/35, 0x23, 0x8}, 0x590}], 0x2, 0x0, &(0x7f0000009480)={r11, r12+30000000}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000094c0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f00000095c0)=0xe8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000009fc0)={0x0, @multicast2, @remote}, &(0x7f000000a000)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000a040)={'team0\x00', 0x0}) r17 = accept4$packet(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f000000a0c0)=0x14, 0x80000) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f000000a140)={0x0, @dev, @dev}, &(0x7f000000a180)=0xc) accept4$packet(r0, &(0x7f000000a1c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f000000a200)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000a340)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f000000a380)={0x0, @broadcast, @loopback}, &(0x7f000000a3c0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f000000a400)={{{@in6=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@local}}, &(0x7f000000a500)=0xe8) getsockname$packet(r0, &(0x7f000000a540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f000000a580)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f000000a5c0)={'vcan0\x00', 0x0}) getsockname$packet(r0, &(0x7f000000a8c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f000000a900)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f000000a980)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f000000aa80)=0xe8) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) connect(r17, &(0x7f0000000140)=@nl=@kern={0x10, 0x0, 0x0, 0x800}, 0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000b580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa000000}, 0xc, &(0x7f000000b540)={&(0x7f000000b640)=ANY=[@ANYBLOB='T\n\x00\x00', @ANYRES16=r1, @ANYBLOB="000427bd7000fcdbdf250200000008000100", @ANYRES32=r2, @ANYBLOB="f001020040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004007f00000008000600", @ANYRES32=r3, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000300000008000600", @ANYRES32=r4, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000008000300030000000800040008000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000002000008000600", @ANYRES32=r5, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000200000008000600", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="bc00020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004000c0000000800070000000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000080003000300000008000400ff01000008000600", @ANYRES32=r13, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000f00000008000100", @ANYRES32=r14, @ANYBLOB="f800020038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400ff01000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004006163746976656261636b75700000000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000607000040000100240001006d6f646500000000000000000000000000000000000000000000000000000000080003000500000010000400726f756e64726f62696e000008000100", @ANYRES32=r15, @ANYBLOB="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", @ANYRES32=r16, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000100000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400ff07000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004008100000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r18, @ANYBLOB="080007000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400060000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="500202003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r21, @ANYBLOB="44000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000001400040002000801ff0f0000010040030200000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004006163746976656261636b75700000000038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000008000300030000000800040025c1000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004006163746976656261636b75700000000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400000400003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r22, @ANYBLOB="4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000001c000400ffff0000ff030000050000fe0500000003000207090000004c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=r23, @ANYBLOB="84020200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000800000008000600", @ANYRES32=r24, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000300000008000600", @ANYRES32=r25, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b000000140004000700001f9f040000030003000300000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e00000008000400a807000008000600", @ANYRES32=r26, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000100000008000600", @ANYRES32=r27, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000400000044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b00000014000400a845037efe0a0000008000070500000084000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000005400040006001f08060000000100ff0100080000000000817f0000000200ff08ff7f000005000605040000000700ff0503000000a04b0801f9ffffff0300fd04020000000700010003000000ff01ff1900000000"], 0xa54}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000) [ 329.928866] device syz_tun entered promiscuous mode [ 329.942461] device syz_tun left promiscuous mode 03:53:40 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:40 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 330.061430] device syz_tun entered promiscuous mode [ 330.076479] device syz_tun left promiscuous mode 03:53:41 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x12}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000003000/0x4000)=nil, 0x4000}, 0x1}) clone(0x0, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f00000000c0)) r1 = semget$private(0x0, 0x1, 0xa9) semctl$SEM_STAT(r1, 0x4, 0x12, &(0x7f0000000140)=""/90) r2 = getpid() r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r3, 0x7001) sched_setattr(r2, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x0, &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000fef000), &(0x7f0000000000)) sched_setaffinity(0x0, 0xfd39, &(0x7f0000000100)=0x5) clone(0x0, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000001000)) read(r0, &(0x7f0000000280)=""/100, 0x39f) 03:53:41 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffdfd}) 03:53:41 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r2 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x2, r2}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) 03:53:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:53:41 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:41 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:41 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_read_part_table(0x0, 0x0, &(0x7f0000000880)) 03:53:41 executing program 6: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:53:41 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2}) 03:53:41 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x1}, &(0x7f00000000c0)=0x0) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/ipc\x00') setns(r3, 0x10000000) timer_gettime(r2, &(0x7f0000000100)) ioctl(r1, 0x8912, &(0x7f0000000040)="345f8f762070c7ef6cfcb611edb24aacc4983819ca8514fba40de8c5e1db6987f9000000000000000000000000000000") bind$inet6(r0, &(0x7f0000000000)={0xa, 0x2, 0x400, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) 03:53:41 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:41 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x6}) 03:53:41 executing program 0: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$KVM_DEASSIGN_DEV_IRQ(r0, 0x4040ae75, &(0x7f0000000040)={0x22, 0x7, 0x7, 0x300}) ioctl$sock_bt(r0, 0x8906, &(0x7f0000000300)="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") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x34, &(0x7f00000002c0), &(0x7f0000000280)=0xfffffffffffffdd3) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="025cc83d6d345f8f7ea26c1520709fe5") bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @loopback=0x7f000001}}, 0x6233, 0xfa2b}, &(0x7f0000000080)=0x90) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000001c0)={r3, 0x40, 0x7, [0x800, 0x1, 0x913, 0x5, 0x100000000, 0x100000001, 0xffffffff00000001]}, &(0x7f0000000200)=0x16) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000000c0)=0x400, &(0x7f0000000400)=0x4) 03:53:41 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2625cf541fffe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:41 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c0036a3b293dc37a10b781f36085d83766076bba65d2e5baecb9bd4becdd3e1fa8f1378043164989a573519893f6f023d42a307e5598bc80da2480cac9900ba5f483bfba64ad62c00a8e80cfab9d03977ac73111525f8387891e7a9c1fb5b8167916ef26a20399b04da15da6fc6bcdaf2bfb81b939fe05a3ad65ad083e8ab2fd91c3743128e82d48b0600000000000000c6b2c9be0e61092ddabfad900402e9f863ba9fa595225e69ac210cd05cbe5eff9c209de6ce8cbaa3219013d5d00c59b373e6b8d608eae704359345fe552f3a99cd905fc4d863d1e1c13113b45726e4c2cde867924bb6cdeba9b8"]) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) write$FUSE_ENTRY(r0, &(0x7f0000000340)={0x90, 0x0, 0x7, {0x6, 0x1, 0x80000001, 0x0, 0x2, 0x3, {0x6, 0xdd9, 0x76, 0x9, 0x4, 0x100000001, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffb, 0xa000000000000000, 0x5, r1, r2, 0x86}}}, 0x90) creat(&(0x7f0000000000)='./file0\x00', 0x0) 03:53:41 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x9, 0x1) ioctl(r1, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080)=0x8001, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80000, 0x104) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) [ 330.831948] device syz_tun entered promiscuous mode [ 330.855936] device syz_tun left promiscuous mode 03:53:42 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x12}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000003000/0x4000)=nil, 0x4000}, 0x1}) clone(0x0, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f00000000c0)) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x0, &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000fef000), &(0x7f0000000000)) sched_setaffinity(0x0, 0xfd39, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x70100, 0x0) clone(0x0, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000001000)) read(r0, &(0x7f0000000280)=""/100, 0x39f) 03:53:42 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0xfcffffff00000000}) 03:53:42 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:42 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:53:42 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:42 executing program 6: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:53:42 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$KVM_SET_XCRS(r0, 0x4188aea7, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) syz_read_part_table(0x0, 0x0, &(0x7f0000000880)) 03:53:42 executing program 0: r0 = signalfd4(0xffffffffffffff9c, &(0x7f0000000300)={0x40}, 0x8, 0x800) fcntl$getflags(r0, 0x401) execve(&(0x7f0000000780)='./file0\x00', &(0x7f0000000940)=[&(0x7f00000007c0)='securityvmnet1\x00', &(0x7f0000000800)='securityvmnet1\x00', &(0x7f0000000840)='wlan1user\\%,\x00', &(0x7f0000000880)='net/fib_triestat\x00', &(0x7f00000008c0)='securityvmnet1\x00', &(0x7f0000000900)='securityvmnet1\x00'], &(0x7f00000009c0)=[&(0x7f0000000980)='\x00']) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) io_setup(0x4, &(0x7f0000000080)=0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_triestat\x00') r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='securityvmnet1\x00', r1}, 0x10) io_cancel(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x0, r4, &(0x7f0000000140)="e83447941c6e0929871ab93302f4944d76c78916577b62ba1207d20adf137a11c27a7238c219a54777e0c7e10386e1ffd150e5e2cd25d2d729cfb67089824acb152aa807ef545e04da6307a087fa54348c9b0dcb20e889c0f508b7bda96d9b94ccf00d1d20d20f9f3f007ac26feaf1ce3f4ccad9cf6f56e488d3161dc0b5d124f517a23df100", 0x86, 0x6, 0x0, 0x1, r5}, &(0x7f00000002c0)) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000340)={{{@in=@rand_addr, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}}}, &(0x7f0000000440)=0xe8) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000540)={{{@in=@rand_addr=0x4, @in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x4e24, 0xffff, 0x4e21, 0x0, 0x2, 0x80, 0xa0, 0x73, r7, r8}, {0xfffffffffffffffd, 0x1, 0x7, 0x3, 0x4ed, 0x0, 0xaa, 0x8000}, {0x2, 0x3, 0x8000, 0x1f}, 0x1, 0x6e6bb7, 0x1, 0x1, 0x2, 0x3}, {{@in=@rand_addr=0x7fff, 0x4d4, 0x3c}, 0xa, @in=@broadcast=0xffffffff, 0x3501, 0x4, 0x2, 0x33c, 0x5, 0x5, 0x9}}, 0xe8) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000a00)=ANY=[@ANYBLOB="442b6b9a0914caf607994d1a8728000000", @ANYRES16=r9, @ANYBLOB="00072dbd7000fbdbdf251000000008000400e40000000c0002000800080000000000"], 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x50) ptrace$setopts(0x4206, r6, 0x6, 0x2) 03:53:42 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:42 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0xc804000000000000}) 03:53:42 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2625cf547048ec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:42 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:42 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x1000000000002, 0x1) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x200400, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000180)=0x7, 0x4) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x6, 0x4101) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000100)={{0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, {0x307, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x60, {0x2, 0x4e21, @broadcast=0xffffffff}, 'bridge0\x00'}) ioctl(r1, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) 03:53:42 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x9000000}) 03:53:42 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x101, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x101000, 0x0) syz_read_part_table(0xd23, 0x1, &(0x7f0000000240)=[{&(0x7f0000000200)="bbc86b07d3ab7f0ee205f758d828e09ad5bcd30b5abe0e7f821d2fcd4fa7a2506c452f", 0x23, 0xff}]) r1 = openat$cgroup_ro(r0, &(0x7f0000000380)="6367726f75702e7374617400e8be4b", 0x0, 0x0) write$FUSE_STATFS(r1, &(0x7f0000000080)={0x60, 0x0, 0x1, {{0x7, 0x7fffffff, 0x0, 0x9, 0x92, 0x2a60, 0x7, 0xd99}}}, 0x60) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f00000003c0)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x5, 0x4000) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000280), &(0x7f0000000300)=0x68) setitimer(0x0, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, &(0x7f0000000340)) ioctl$TIOCLINUX2(r2, 0x541c, &(0x7f0000000100)={0x2, 0x3, 0x0, 0x5, 0xffffffff, 0x8001}) syz_read_part_table(0x0, 0x0, &(0x7f0000000880)) 03:53:42 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 331.681704] device syz_tun entered promiscuous mode [ 331.699352] Dev loop4: unable to read RDB block 6 [ 331.704319] loop4: unable to read partition table [ 331.717437] loop4: partition table beyond EOD, truncated [ 331.722999] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 331.733106] device syz_tun left promiscuous mode 03:53:43 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x12}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000003000/0x4000)=nil, 0x4000}, 0x1}) clone(0x0, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f00000000c0)) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x5, 0x8c040) getsockopt$inet6_dccp_int(r2, 0x21, 0x1f, &(0x7f00000000c0), &(0x7f0000000140)=0x4) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000180)={{0xf29e, 0x9, 0x800000, 0x47, 0xfff, 0xffffffffffffffff}, 0x4}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000fef000), &(0x7f0000000000)) sched_setaffinity(0x0, 0xfd39, &(0x7f0000000100)=0x5) clone(0x0, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000001000)) read(r0, &(0x7f0000000280)=""/100, 0x39f) 03:53:43 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:43 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0xd00}) 03:53:43 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:53:43 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:53:43 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:43 executing program 4: times(&(0x7f0000000040)) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000180)=[0x80000000, 0x3]) syz_read_part_table(0x100000001, 0x4d8c9738a68eac6, &(0x7f0000000880)) 03:53:43 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:53:43 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0xfeffffff00000000}) 03:53:43 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 332.678658] device syz_tun entered promiscuous mode [ 332.689095] device syz_tun entered promiscuous mode [ 332.714497] device syz_tun left promiscuous mode 03:53:43 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:43 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x800000}) 03:53:43 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:53:43 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 332.732577] device syz_tun left promiscuous mode 03:53:43 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f00000012c0)='/dev/dmmidi#\x00', 0x76, 0x402) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000001280)) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0x4}, 0x1) creat(&(0x7f0000001380)='./file0/file0\x00', 0x0) syz_read_part_table(0x0, 0x0, &(0x7f0000000880)) syz_read_part_table(0x7f, 0x3, &(0x7f0000001200)=[{&(0x7f00000000c0)="1d18a875bbab7dc0589a7ec8026438f45e69344b34f98a22fa78ed988646b64dca6d58319d0137ceac8a09cb53f81342fec7bf4191be17051357ef056c2dd930d2a64c3be0c7c870c930619e9a40ff86490d897e1e7777e6766334aca0723455d87a60232393a2479547e0e171b3811f21fd89a36a039ec9e2230057d6ed24bbedb13666aa09feb2671f9bb61a0e5184736fa3a33fa923fd7bb53cd0ec0065f332ae5dd1096f7f9b743a518ee5b60c899ff9787f678c6f0f38a496f5024c25ad765cd178e2f4c5d174515d881673e10699686758758d397f7ddff94233e863f47146dc7a90", 0xe5, 0x200}, {&(0x7f00000001c0)="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", 0x1000, 0x6}, {&(0x7f00000011c0)="e8d8da49", 0x4, 0xd92}]) 03:53:43 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) [ 332.827246] device syz_tun entered promiscuous mode [ 332.844403] device syz_tun entered promiscuous mode [ 332.852577] device syz_tun left promiscuous mode [ 332.861418] device syz_tun left promiscuous mode 03:53:44 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x12}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000003000/0x4000)=nil, 0x4000}, 0x1}) clone(0x0, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f00000000c0)) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x0, &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000fef000), &(0x7f0000000000)) sched_setaffinity(0x0, 0xfd39, &(0x7f0000000100)=0x5) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000004000/0x2000)=nil, 0x2000}, 0x2}) clone(0x0, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000001000)) read(r0, &(0x7f0000000280)=""/100, 0x39f) 03:53:44 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x39000000}) 03:53:44 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:44 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:44 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_read_part_table(0x0, 0x9, &(0x7f00000023c0)=[{&(0x7f0000000040)="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", 0xfffffffffffffdb9, 0x9}, {&(0x7f0000001040)="1b78f5141b64681d9b71296cd3644b22ff3e27231ab43f21d2d24d9c5125b0ac053aeea80c", 0x25, 0x2}, {&(0x7f0000001080)="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", 0x123e, 0x1f}, {&(0x7f0000002080)="1ca829e3764d727d53f5347392313b8d22c2029d5ad2de92116871d1ade70000000000000000000000000000", 0x2d, 0xfd2}, {&(0x7f00000020c0)="a3432de787a50f1627c9a180391b5336737590d3008b8ec73d76fc2ad93f9fdcf8695292e08d66189c86338c07f7d166f3da8a62ca553a696e8b3821041add4800eedead4c0a2e69b1578cf2d096c3c7b03612e68083c71e70734d139713f7b545cf912404bda5cd7adb62d917", 0xb0, 0x2}, {&(0x7f0000002140)="9c285c274e1f1a0ba10a93b7803bdfd66d516221f3592cb8b67cc5", 0x1b, 0x4}, {&(0x7f0000002180)="95b183f408aca94f844c554aa454a912b87ecf59b78d0d0f652bf93f246bb58858b9cffd5638bc8e07eb86f07564b79568cf417fe985ad83a6c39522b9ffbec6799a8e7445dc0eff2a10062c6b2333bc6e8d1ae7f3b3719f826760783a835e2b022db3d89770a309c84739530d4ee9ce4b91883b49620e198bd84af4add01d84dad05eb3865b666b5f4944e0d42525f4f17a97f0347bf02595528fc628bbb80b04a4a62f29ba61af91208d4f93087c3724f30b6a72253d8fd3c08b85b53ceb5af007364db2b47923c00fb420d28ebe14317fa53389e2f77e1c33eaa635e4238ad44687496d599f26a93058b0aa35d2d9e7199a326e36", 0xf6, 0x8000}, {&(0x7f0000002280)="a1ac1157ba7f3941c7551966af5bc3d2a636e737e6081a5e399a56e8bca90dd022729e46eb521920a984754892438c8dbb23ce2fa3ce48532a5e4e1302d862c084ae08c0c0414e58c4ee548a08dbbadfec492223a7814a52bd586b86dd534e622a8674252124de61ac73c1d3412d7df17682166cfe9b31017f5f6d54cbf28944314d0ecff6438b8ea0ddb6edccc55cd0742d241353f6e1fda9d9e9d3dc751b6147e7648ed57291bd80a7f0d5eeb00db52dab773d6e2a026a7973e4b069b80d00ef2a3c8d5d14dd2e348af0672e2ec9", 0xcf, 0x9}, {&(0x7f0000002380)="5e175334b23f134528956262bea0c046e2aa860cd1bebb10e310877704", 0x1d, 0xf22}]) fcntl$getflags(r0, 0x408) getsockopt$llc_int(r0, 0x10c, 0xfffffffffffffffe, &(0x7f00000024c0), &(0x7f0000002500)=0x4) 03:53:44 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:53:44 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:53:44 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:53:44 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0xd900}) 03:53:44 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 333.764472] device syz_tun entered promiscuous mode 03:53:44 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:44 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:53:44 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 333.790380] device syz_tun entered promiscuous mode [ 333.801367] device syz_tun left promiscuous mode [ 333.821420] device syz_tun left promiscuous mode 03:53:44 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:44 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x4000}) 03:53:44 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) [ 333.854201] device syz_tun entered promiscuous mode [ 333.891536] device syz_tun left promiscuous mode [ 333.918947] device syz_tun entered promiscuous mode [ 333.933310] device syz_tun left promiscuous mode 03:53:45 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x12}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000003000/0x4000)=nil, 0x4000}, 0x1}) clone(0x0, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f00000000c0)) r1 = memfd_create(&(0x7f0000000000)='cpuset\x00', 0x1) ioctl$TCSETA(r1, 0x5406, &(0x7f00000000c0)={0x3f, 0x8000, 0x4, 0x8, 0x5, 0x8000, 0x100000001, 0xa47, 0x7, 0x5}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x0, &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000fef000), &(0x7f0000000000)) sched_setaffinity(0x0, 0xfd39, &(0x7f0000000100)=0x5) clone(0x0, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000001000)) read(r0, &(0x7f0000000280)=""/100, 0x39f) 03:53:45 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:45 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x4c8}) 03:53:45 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:53:45 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:45 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:53:45 executing program 4: chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_read_part_table(0xfffffffffffffffd, 0x0, &(0x7f0000000880)) 03:53:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:53:45 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffff6}) 03:53:45 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:45 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:45 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200}) close(r2) [ 334.869889] device syz_tun entered promiscuous mode 03:53:45 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x4000000000000000}) [ 334.906403] device syz_tun left promiscuous mode 03:53:45 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:53:45 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:45 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec487054cf252600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 334.995985] device syz_tun entered promiscuous mode [ 335.017475] device syz_tun left promiscuous mode 03:53:46 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='/exe\x00\x00\x00\x00\x00\x00') io_setup(0x8000000007, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x7, 0x0, 0x0, r0, &(0x7f0000000200), 0xfffffdcc}]) 03:53:46 executing program 4: creat(&(0x7f0000000080)='./file0\x00', 0x0) syz_read_part_table(0x0, 0x0, &(0x7f0000000880)) 03:53:46 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:53:46 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:46 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x3900000000000000}) 03:53:46 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:46 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:53:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:53:46 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:46 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x3000000}) 03:53:46 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f00000001c0)={0x10}, 0x15e, &(0x7f0000000100)={&(0x7f0000000900)=@getroute={0x14, 0x1a, 0x1c974209d04c2781}, 0x14}, 0x1}, 0x0) [ 335.938316] device syz_tun entered promiscuous mode [ 335.947339] device syz_tun entered promiscuous mode 03:53:46 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:46 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/28, 0x1c) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000d4b000)=0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000740)={0xc1, @time}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000300)={0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer2\x00', 0x0, 0x0) 03:53:46 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r2}) close(0xffffffffffffffff) 03:53:46 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:53:46 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 335.979285] device syz_tun left promiscuous mode [ 335.985472] device syz_tun left promiscuous mode 03:53:46 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295e) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mkdirat(r2, &(0x7f00000001c0)='./file1\x00', 0x0) 03:53:46 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x3900}) 03:53:47 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:47 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:47 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0xd}) 03:53:47 executing program 4: socket$inet_sctp(0x2, 0x0, 0x84) splice(0xffffffffffffffff, &(0x7f0000000180), 0xffffffffffffffff, &(0x7f0000000040), 0x4, 0x0) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x0) [ 336.067332] device syz_tun entered promiscuous mode [ 336.072719] device syz_tun entered promiscuous mode [ 336.089723] device syz_tun left promiscuous mode [ 336.106533] device syz_tun left promiscuous mode 03:53:47 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r2}) close(r1) 03:53:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:53:47 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:47 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:47 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:53:47 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0xffffffff00000000}) [ 336.790810] device syz_tun entered promiscuous mode [ 336.812497] device syz_tun left promiscuous mode 03:53:48 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f000035d000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc10c5541, &(0x7f000035dffc)) 03:53:48 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:53:48 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x1000000000000024, 0x81, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000010c0)={r0, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0}, 0x10) 03:53:48 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:48 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0xf6ffffff00000000}) 03:53:48 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:48 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:53:48 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x200000000000000}) 03:53:48 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f00000000c0)='nodev\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, "e1d3f877e5eae453e55d7d64d00d4901baed21f7de92a8669b38ccd6260857dbf5ae46354569636517b50f805ae208258dbb7d0abe8d208f0f1bcc885c8ba93c", "fe047b3177f4173b6605afb988de9bbae0932dee7e07195d78f7ddd19a373d5aa0a55519ff855900000002e200", "ee42e3ef1d1772a9432c220303b70b708ad791139c2982fccc5d747a3131995a"}) socket$inet_udp(0x2, 0x2, 0x0) 03:53:48 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:48 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 337.102773] device syz_tun entered promiscuous mode [ 337.118648] device syz_tun entered promiscuous mode [ 337.146768] device syz_tun left promiscuous mode [ 337.182696] device syz_tun left promiscuous mode 03:53:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:53:48 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:53:48 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f00000000c0)='nodev\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "e1d3f877e5eae453e55d7d64d00d4901baed21f7de92a8669b38ccd6260857dbf5ae46354569636517b50f805ae208258dbb7d0abe8d208f0f1bcc885c8ba93c", "fe047b3177f4fc2eb04172daa8e7d1c4c4cf144a23173b6605afb988de9bbae0932dee7e07195d78f7ddd19a37cb5aa0a5629eef628582fba5bf4af44acfe059", "ee42e3ef1d1772a9432c220303b70b708ad791139c2982fccc5d747a3131995a"}) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup2(r2, r0) 03:53:48 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:48 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0xfdfdffff}) 03:53:48 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:48 executing program 4: 03:53:48 executing program 0: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r2}) close(r1) 03:53:48 executing program 4: 03:53:48 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:48 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:48 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x9}) 03:53:48 executing program 4: [ 337.643629] device syz_tun entered promiscuous mode [ 337.659720] device syz_tun entered promiscuous mode 03:53:48 executing program 7: 03:53:48 executing program 4: 03:53:48 executing program 7: [ 337.713797] device syz_tun left promiscuous mode [ 337.719159] device syz_tun left promiscuous mode 03:53:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:53:49 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x40000000}) 03:53:49 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:49 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:53:49 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='status\x00') write$binfmt_misc(r0, &(0x7f0000000300)={'syz1'}, 0x4) 03:53:49 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:49 executing program 0: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r2}) close(r1) 03:53:49 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x20000000000111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000480)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080)=0x2, r1, 0x0, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}}}, 0x48) 03:53:49 executing program 4: 03:53:49 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2000000}) 03:53:49 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:49 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 338.475240] device syz_tun entered promiscuous mode [ 338.485570] device syz_tun entered promiscuous mode 03:53:49 executing program 7: 03:53:49 executing program 4: 03:53:49 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:49 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffc}) 03:53:49 executing program 4: [ 338.525088] device syz_tun left promiscuous mode [ 338.537972] device syz_tun left promiscuous mode 03:53:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:53:50 executing program 7: 03:53:50 executing program 0: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r2}) close(r1) 03:53:50 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:53:50 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:50 executing program 4: 03:53:50 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x100000000000000}) 03:53:50 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:50 executing program 7: 03:53:50 executing program 4: 03:53:50 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0xfbffffff}) 03:53:50 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:50 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:50 executing program 4: 03:53:50 executing program 7: 03:53:50 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) [ 339.331564] device syz_tun entered promiscuous mode [ 339.341084] device syz_tun entered promiscuous mode [ 339.368273] device syz_tun left promiscuous mode [ 339.373424] device syz_tun left promiscuous mode [ 339.439661] device syz_tun entered promiscuous mode [ 339.481656] device syz_tun left promiscuous mode 03:53:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:53:51 executing program 4: 03:53:51 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:53:51 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x900}) 03:53:51 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2625cf547048ec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:51 executing program 7: 03:53:51 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:51 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:53:51 executing program 7: 03:53:51 executing program 4: 03:53:51 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0xfeffffff}) 03:53:51 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:51 executing program 7: [ 340.195732] device syz_tun entered promiscuous mode 03:53:51 executing program 4: 03:53:51 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0xc8040000}) 03:53:51 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 340.247788] device syz_tun entered promiscuous mode [ 340.255560] device syz_tun left promiscuous mode [ 340.275690] device syz_tun left promiscuous mode 03:53:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:53:51 executing program 7: 03:53:51 executing program 4: 03:53:51 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:53:51 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:53:51 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:51 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:51 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0xc804}) 03:53:51 executing program 4: 03:53:52 executing program 7: 03:53:52 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffe}) 03:53:52 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:52 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec487054cf252600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 341.059313] device syz_tun entered promiscuous mode 03:53:52 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc2c85512, &(0x7f0000000440)={{0x2, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f00000001c0)}) 03:53:52 executing program 7: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x595, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x90011, r0, 0x0) sync() 03:53:52 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffb}) [ 341.114919] device syz_tun entered promiscuous mode [ 341.120159] device syz_tun left promiscuous mode [ 341.152435] device syz_tun left promiscuous mode 03:53:52 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:53:52 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:53:52 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r1, 0x1) unshare(0x2000400) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x10, "87caf16789eea07fd41bb24e44dc64e9"}, &(0x7f0000000040)=0x18) 03:53:52 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:52 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:52 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:53:52 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x39}) 03:53:52 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup2(r0, r2) dup2(r2, r1) 03:53:52 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1000000000000}) 03:53:52 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:52 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 341.917500] device syz_tun entered promiscuous mode [ 341.952993] device syz_tun left promiscuous mode 03:53:52 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x900000000000000}) 03:53:52 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:52 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:53:52 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:52 executing program 7: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$P9_RRENAMEAT(r0, &(0x7f0000000000)={0x7, 0x4b}, 0x7) [ 341.984920] device syz_tun entered promiscuous mode [ 342.017252] device syz_tun left promiscuous mode [ 342.028989] device syz_tun entered promiscuous mode [ 342.060040] device syz_tun left promiscuous mode 03:53:53 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:53:53 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x300000000000000}) 03:53:53 executing program 4: semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000280)) 03:53:53 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:53:53 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:53 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x3}, 0x1c) 03:53:53 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:53 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x0, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:53:53 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0xfdfdffff00000000}) 03:53:53 executing program 7: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r2}) close(r1) 03:53:53 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:53 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:53 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0xd000000}) 03:53:53 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) [ 342.953194] device syz_tun entered promiscuous mode 03:53:53 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x0, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) [ 342.980244] device syz_tun entered promiscuous mode 03:53:53 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 343.003550] device syz_tun left promiscuous mode [ 343.021598] device syz_tun entered promiscuous mode [ 343.053726] device syz_tun left promiscuous mode [ 343.072215] device syz_tun left promiscuous mode 03:53:54 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:53:54 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:54 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0xfcffffff}) 03:53:54 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:53:54 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x0, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:53:54 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:54 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:53:54 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:53:54 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x3}) 03:53:54 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:54 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 343.596937] device syz_tun entered promiscuous mode [ 343.604605] device syz_tun entered promiscuous mode [ 343.626729] device syz_tun entered promiscuous mode [ 343.633463] device syz_tun left promiscuous mode 03:53:54 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:53:54 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x600000000000000}) [ 343.658516] device syz_tun left promiscuous mode 03:53:54 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:54 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:53:54 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 343.680196] device syz_tun left promiscuous mode [ 343.695108] device syz_tun entered promiscuous mode [ 343.711040] device syz_tun left promiscuous mode [ 343.733681] device syz_tun entered promiscuous mode [ 343.773851] device syz_tun left promiscuous mode 03:53:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:53:55 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:53:55 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r1) 03:53:55 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:53:55 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0xd00000000000000}) 03:53:55 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:55 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2625cf541fffe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:55 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:53:55 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0xd900000000000000}) 03:53:55 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:55 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 344.408584] device syz_tun entered promiscuous mode [ 344.415630] device syz_tun entered promiscuous mode [ 344.434385] device syz_tun entered promiscuous mode [ 344.444382] device syz_tun left promiscuous mode [ 344.449723] device syz_tun left promiscuous mode 03:53:55 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:53:55 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) [ 344.457673] device syz_tun left promiscuous mode 03:53:55 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:55 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0xd9000000}) 03:53:55 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 344.508724] device syz_tun entered promiscuous mode [ 344.515782] device syz_tun entered promiscuous mode [ 344.531275] device syz_tun left promiscuous mode [ 344.549552] device syz_tun left promiscuous mode 03:53:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:53:56 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r1) 03:53:56 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:56 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:53:56 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000"}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:53:56 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:56 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:53:56 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0xd9}) 03:53:56 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x80000000000000}) 03:53:56 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 345.250218] device syz_tun entered promiscuous mode [ 345.264060] device syz_tun entered promiscuous mode [ 345.273246] device syz_tun entered promiscuous mode [ 345.280135] device syz_tun left promiscuous mode [ 345.290762] device syz_tun entered promiscuous mode 03:53:56 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000"}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) [ 345.303061] device syz_tun left promiscuous mode 03:53:56 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:56 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:53:56 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 345.330361] device syz_tun left promiscuous mode 03:53:56 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x6000000}) 03:53:56 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x0, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) [ 345.358109] device syz_tun entered promiscuous mode [ 345.366702] device syz_tun left promiscuous mode [ 345.408276] device syz_tun left promiscuous mode [ 345.413677] device syz_tun entered promiscuous mode [ 345.444910] device syz_tun left promiscuous mode 03:53:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:53:57 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x12}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000003000/0x4000)=nil, 0x4000}, 0x1}) clone(0x0, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f00000000c0)) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x0, &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000fef000), &(0x7f0000000000)) r2 = accept4(r0, &(0x7f0000000140)=@nfc_llcp, &(0x7f0000000000)=0x80, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000240)=0x20) setsockopt$inet6_tcp_buf(r2, 0x6, 0x1d, &(0x7f00000003c0)="8b29afb914bc5eb822acc4bad5bce9cf7a15eb8071f5de8062b26274cfda72b117ea6ed3eff9620f09e02c56657ae6f4a58ffec6aabcc6488b0cd0d9a38614bd321e577534532b7400a8fec4f34f9ae8dff4920033dac596a9edb415e051580936237c9fad40a2af3cd3c8cb4b97407dff6cf591bc5a29109dbecf6db4f7282f7f1c68582dc8a7ab3a6f2337c93f7a55eef8ab15d0997e865d652b53eefaf900b0acbb151156e0146875322cb86ad42e4af7ffcaa1bf2a75", 0xb8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={r3, 0x7}, 0x8) sched_setaffinity(0x0, 0xfd39, &(0x7f0000000100)=0x5) move_pages(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000003000/0x4000)=nil], 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x4) clone(0x0, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000001000)) read(r0, &(0x7f0000000280)=""/100, 0x39f) 03:53:57 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:57 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:57 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0xf6ffffff}) 03:53:57 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:53:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000"}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:53:57 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:57 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0xfbffffff00000000}) 03:53:57 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:57 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2ff1f54cf252600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:57 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 346.116073] device syz_tun entered promiscuous mode 03:53:57 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000"}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:53:57 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1000000}) 03:53:57 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 346.145226] device syz_tun left promiscuous mode [ 346.164525] device syz_tun entered promiscuous mode [ 346.178732] device syz_tun left promiscuous mode 03:53:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) [ 346.213216] device syz_tun entered promiscuous mode [ 346.249408] device syz_tun left promiscuous mode 03:53:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:53:57 executing program 7: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:57 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:57 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:57 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x600}) 03:53:57 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_read_part_table(0x0, 0x3, &(0x7f00000015c0)=[{&(0x7f0000000040)="a23b74c52ad0e85446dcede10e92f09f5b66f64cffbc511046296f50f9368045aaf4b30c355b5a956f8a8bbc50f96516aa3f0462500d860d59bb538a6018ec", 0x3f}, {&(0x7f0000000080)="77c951cc5184af82b399bf95a5f23e8af060be98ecf95136102ea4decc70dedd4534d2533ba57025c616ff633a097508723af15823e0fbe4867320d1a527e27c47e477d9c5e8ff7ce6bf0694f8961e76358e19403cafc84d88dd9ed66b6c6d2fe494ab09298b2966cb157f9a31b68af8dee6a4060d93fddfc2c7ed61435cf3cdc24efb96659463299cfe11eeafffbf39b420e7036ab654556d6b0f379f1033dfbf4299ae2f459871ce98fbd6f6f484d0234975a76ea012778ee101ab9275da9f7fb30124b3c2fefe", 0xc8, 0x8}, {&(0x7f0000000180)="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", 0x13c9, 0x4}, {&(0x7f00000014c0)="2c0406e725f920dad23d07c5a09d03b94ccdea158e02de58187f5d7290e1d63cd6e616ad0180af346a4105000000969eef484d1b48b1b4a3a23038ee6ab76b5c000abb9d8cab20d2a3df97a3b4cc7a87ed0a29622d7a5bdc83ee2cec40499ed5da702bf48781c34eb5c6ccdaf1d7b1bcea72d5cc1e95fc8b050835417fe92e52f42f9f3f4e2f62314a890730df6a26cae29f8c6b9f9d0897c15bbb072701808b18a5a3592e276705b086feeac9a693ffb27342dd6b6d4a6b98449cffb76a9509351b000000000000", 0xb7, 0x5}, {&(0x7f0000001200)="af414794f9a933b020ddb927de46a700000000f12cf23f435d0b2d3c06c01d94021014ab2caeffff184ef394de9b153afbd8c3a6365369bbf161f87bbf25a6e900b7109f08c26b41fa071e007b3612c6fae37db92af1bfe858b363df98b488c8a273e2f7e5068663bb5b438add40c70f102f3b60b272d5d0b87a514dd883aba560f5dad269", 0x85, 0x8}, {&(0x7f0000001680)="0b02bcf6436911fb201601defb7a288c3be4d1881cc8855375804ab2be6567cec377493367e82a9419cbd67f5c45ebb17c6bf44298e5c18d58de38ed0a1fb099acba79", 0x43, 0x7fff}]) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000001180)) syz_open_dev$dspn(&(0x7f00000011c0)='/dev/dsp#\x00', 0xfffffffffffffffb, 0x80) 03:53:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:53:57 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:53:57 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x4000}) 03:53:58 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:58 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:53:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:53:58 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2ff1f54cf252600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:58 executing program 7: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) r1 = syz_open_procfs(r0, &(0x7f00002e9000)='task\x00') getdents(r1, &(0x7f0000720fd4)=""/44, 0x1b3) readlinkat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/10, 0xa) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f00000000c0)={0x1, 0x0, [{0x7f, 0x0, 0x1}]}) getdents64(r1, &(0x7f00008e6fe0)=""/32, 0x20) [ 347.055442] Dev loop4: unable to read RDB block 9 [ 347.060402] loop4: unable to read partition table [ 347.071734] loop4: partition table beyond EOD, truncated [ 347.077285] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) 03:53:58 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:53:58 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x100000000000000}) 03:53:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:53:58 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:53:58 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:58 executing program 7: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1e) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0x0) keyctl$update(0x2, r1, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x3) r3 = dup3(r0, r0, 0x80000) bind$bt_l2cap(r3, &(0x7f0000000200)={0x1f, 0x8, {0x1ff, 0xffffffffffffff6a, 0x6, 0x8, 0x7, 0x7}, 0x5, 0x2489365c}, 0xe) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) write$P9_RGETLOCK(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="1f0000003701000100000100000000003f00040000000000", @ANYRES32=r4, @ANYBLOB="01005c"], 0x1f) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast2=0xe0000002}}, 0x1e) connect$pptp(r0, &(0x7f00000000c0)={0x18, 0x2}, 0x1e) 03:53:58 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_read_part_table(0x0, 0x3, &(0x7f00000015c0)=[{&(0x7f0000000040)="a23b74c52ad0e85446dcede10e92f09f5b66f64cffbc511046296f50f9368045aaf4b30c355b5a956f8a8bbc50f96516aa3f0462500d860d59bb538a6018ec", 0x3f}, {&(0x7f0000000080)="77c951cc5184af82b399bf95a5f23e8af060be98ecf95136102ea4decc70dedd4534d2533ba57025c616ff633a097508723af15823e0fbe4867320d1a527e27c47e477d9c5e8ff7ce6bf0694f8961e76358e19403cafc84d88dd9ed66b6c6d2fe494ab09298b2966cb157f9a31b68af8dee6a4060d93fddfc2c7ed61435cf3cdc24efb96659463299cfe11eeafffbf39b420e7036ab654556d6b0f379f1033dfbf4299ae2f459871ce98fbd6f6f484d0234975a76ea012778ee101ab9275da9f7fb30124b3c2fefe", 0xc8, 0x8}, {&(0x7f0000000180)="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", 0x13c9, 0x4}, {&(0x7f00000014c0)="2c0406e725f920dad23d07c5a09d03b94ccdea158e02de58187f5d7290e1d63cd6e616ad0180af346a4105000000969eef484d1b48b1b4a3a23038ee6ab76b5c000abb9d8cab20d2a3df97a3b4cc7a87ed0a29622d7a5bdc83ee2cec40499ed5da702bf48781c34eb5c6ccdaf1d7b1bcea72d5cc1e95fc8b050835417fe92e52f42f9f3f4e2f62314a890730df6a26cae29f8c6b9f9d0897c15bbb072701808b18a5a3592e276705b086feeac9a693ffb27342dd6b6d4a6b98449cffb76a9509351b000000000000", 0xb7, 0x5}, {&(0x7f0000001200)="af414794f9a933b020ddb927de46a700000000f12cf23f435d0b2d3c06c01d94021014ab2caeffff184ef394de9b153afbd8c3a6365369bbf161f87bbf25a6e900b7109f08c26b41fa071e007b3612c6fae37db92af1bfe858b363df98b488c8a273e2f7e5068663bb5b438add40c70f102f3b60b272d5d0b87a514dd883aba560f5dad269", 0x85, 0x8}, {&(0x7f0000001680)="0b02bcf6436911fb201601defb7a288c3be4d1881cc8855375804ab2be6567cec377493367e82a9419cbd67f5c45ebb17c6bf44298e5c18d58de38ed0a1fb099acba79", 0x43, 0x7fff}]) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000001180)) syz_open_dev$dspn(&(0x7f00000011c0)='/dev/dsp#\x00', 0xfffffffffffffffb, 0x80) 03:53:58 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:53:58 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x39000000}) 03:53:58 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}) 03:53:58 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:58 executing program 7: r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x7ff, 0x181400) mq_timedreceive(r0, &(0x7f0000000440)=""/230, 0xe6, 0x8, &(0x7f0000000540)={0x0, 0x989680}) sendmsg$kcm(r0, &(0x7f0000000400)={&(0x7f00000000c0)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'authenc(md5-generic,xts-aes-aesni)\x00'}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)="f0711c9367a0c78b00d2beea67fd544ca130e718fc668dc9770a396bd5bb99cc422af5ec5c96d239bb143d9741b8bad763686ed1eaad96758592d2800cd1f96a731ea1355f4cc8283207ef978b1bf63cb62f344f838574b170cd57169e5b5acf861755765828d50016bcdf8865a543d74ed122c57203fe8783de5df4a67d5a7c9ab7f5968c7cc69283865490bea1bf256a465aacdbd273fc6a6eabfac15ed949fabe22760ea6f143a9c416b2ed71d4095499a870da4d25e822e827abd07d85473514a04dfee674632a2a778bcef553480087f813b5f50ecc64f408b1773cdbb16b", 0xe1}, {&(0x7f0000000240)="7ecc40e174881b1be02257ee802eaca0f8fcdaa0189f6b773cbf9e91c7c323b73169b6c7e24fb85d44", 0x29}, {&(0x7f0000000280)="528b5f72b283368927b0ddaf4d1353d9a165f87db56074eab6049d84fbd08a8850d27a5afe77e765e42e595d72e9730c0731981889ed04462964a06f57dd5ac6a4a30559094b135d48dc57fc8754aa048429be2e6f69beee24e07f31f02574807a01dd604993807275655768dc35819135db1ff596770a5b4b0df1da6e2f0d415725b46f17b23f16a1a8451835c523e693a54d7bde5d1c17afe62dce6558d1b9d4fddbbceaf666cd3b264cc05b9289cf06dcd1d5d30f1b0d8bcc54125b416c41fc48555062ef32a8760b709c593e7c5803ee966806a5b6df6e400a309d05123ed35f", 0xe2}, {&(0x7f0000001380)="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", 0x1000}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000009000000c794b0e702000010eb6842e48d365325474026cf2db82562c9999f642a4bd438458b8fd2f9925cc9ca2e7643d8e9004e725463287830ae002f55e1402626c106aa3be85158dea8434fdc1bf9cbaaa1105f0a0eda11bb190fb2f238e30071e51abdf78b05cdb0f939eff33d43e0fbe8c7e7c39c8faaab48f8cc1c2371a0b0410c72fb4bab76758f52b25d65a3"], 0x18}, 0x4000000) openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x8100, 0x0) r1 = socket$inet6(0xa, 0x2000000000001, 0x400004) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000105ffc)=0x10000, 0x4) recvmsg(r1, &(0x7f0000001340)={&(0x7f0000000000), 0x80, &(0x7f0000001300)}, 0x1) 03:53:58 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) [ 347.802244] Dev loop4: unable to read RDB block 9 [ 347.807191] loop4: unable to read partition table [ 347.812369] device syz_tun entered promiscuous mode [ 347.819252] loop4: partition table beyond EOD, truncated [ 347.824796] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) 03:53:58 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0xd900}) 03:53:58 executing program 7: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x1221, 0x400) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x100000001, @dev={0xfe, 0x80, [], 0x13}, 0x1}, r1}}, 0x30) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2}, 0x1}, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00003cefe4)={&(0x7f0000000300)={0x10, 0x36200}, 0xc, &(0x7f0000007ff0)={&(0x7f0000000180)={0xffce, 0x2e, 0x6fd, 0x0, 0x0, {0x2004}, [@nested={0xc, 0x0, [@typed={0x62, 0x2, @ipv4}]}]}, 0xffce}, 0x1}, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000200)) 03:53:58 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 347.858700] device syz_tun left promiscuous mode [ 347.926534] netlink: 65362 bytes leftover after parsing attributes in process `syz-executor7'. [ 347.935391] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 347.967854] netlink: 65362 bytes leftover after parsing attributes in process `syz-executor7'. [ 347.977205] openvswitch: netlink: Flow set message rejected, Key attribute missing. 03:53:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:53:59 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_read_part_table(0x0, 0x3, &(0x7f00000015c0)=[{&(0x7f0000000040)="a23b74c52ad0e85446dcede10e92f09f5b66f64cffbc511046296f50f9368045aaf4b30c355b5a956f8a8bbc50f96516aa3f0462500d860d59bb538a6018ec", 0x3f}, {&(0x7f0000000080)="77c951cc5184af82b399bf95a5f23e8af060be98ecf95136102ea4decc70dedd4534d2533ba57025c616ff633a097508723af15823e0fbe4867320d1a527e27c47e477d9c5e8ff7ce6bf0694f8961e76358e19403cafc84d88dd9ed66b6c6d2fe494ab09298b2966cb157f9a31b68af8dee6a4060d93fddfc2c7ed61435cf3cdc24efb96659463299cfe11eeafffbf39b420e7036ab654556d6b0f379f1033dfbf4299ae2f459871ce98fbd6f6f484d0234975a76ea012778ee101ab9275da9f7fb30124b3c2fefe", 0xc8, 0x8}, {&(0x7f0000000180)="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", 0x13c9, 0x4}, {&(0x7f00000014c0)="2c0406e725f920dad23d07c5a09d03b94ccdea158e02de58187f5d7290e1d63cd6e616ad0180af346a4105000000969eef484d1b48b1b4a3a23038ee6ab76b5c000abb9d8cab20d2a3df97a3b4cc7a87ed0a29622d7a5bdc83ee2cec40499ed5da702bf48781c34eb5c6ccdaf1d7b1bcea72d5cc1e95fc8b050835417fe92e52f42f9f3f4e2f62314a890730df6a26cae29f8c6b9f9d0897c15bbb072701808b18a5a3592e276705b086feeac9a693ffb27342dd6b6d4a6b98449cffb76a9509351b000000000000", 0xb7, 0x5}, {&(0x7f0000001200)="af414794f9a933b020ddb927de46a700000000f12cf23f435d0b2d3c06c01d94021014ab2caeffff184ef394de9b153afbd8c3a6365369bbf161f87bbf25a6e900b7109f08c26b41fa071e007b3612c6fae37db92af1bfe858b363df98b488c8a273e2f7e5068663bb5b438add40c70f102f3b60b272d5d0b87a514dd883aba560f5dad269", 0x85, 0x8}, {&(0x7f0000001680)="0b02bcf6436911fb201601defb7a288c3be4d1881cc8855375804ab2be6567cec377493367e82a9419cbd67f5c45ebb17c6bf44298e5c18d58de38ed0a1fb099acba79", 0x43, 0x7fff}]) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000001180)) syz_open_dev$dspn(&(0x7f00000011c0)='/dev/dsp#\x00', 0xfffffffffffffffb, 0x80) 03:53:59 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:59 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:53:59 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:53:59 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0xfffffffb}) 03:53:59 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:59 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") fchmod(r0, 0xfffffffffffffffd) r1 = accept(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, &(0x7f0000000080)=0x80) sendmmsg$nfc_llcp(r1, &(0x7f00000037c0)=[{&(0x7f00000000c0)={0x27, 0x1, 0x1, 0x7, 0x1, 0x1000, "18204f1cac8205781856764c01fb070aad99c7a96bddc6d8becb4674004cd41372b059adf33635d6827e0b69bf2dd13c107eb8b38515722f3ae5d9c664a8a8", 0x2b}, 0x60, &(0x7f0000000480)=[{&(0x7f0000000140)="5131a13715702879e559143fce22326ba9a764eea3b76b161737a18087d7", 0x1e}, {&(0x7f0000000180)="fde8ad49103141826f0115f51a790e6d3441c4e87693ee28c0a095072269e2a0ec1310d653d51ae59a637140904ea13a2eab2a9e7dcbecd2e59a974916cc1526969e9e53a2fe540b7fe1bc4ad7edeabad3b508bc2d3d4b76b54f569ce3582722978676c8d08a0d6864ae55ee3a81f54a7b2d985a959528658652da1e8e13446d93133696cac591102675227aa4542db47fe6bd7b0c3852e9fa742c66c4dea8a88007979934c21f7aeae9bc10ac514d519c01dcd4f59a667663f620aeb5afd80d3d9bd828c504c172e0af8e345d5c97882846521086afe554cd95cf7fe01dd14b44e4d53fba630b84846076c30e7a07b8db", 0xf1}, {&(0x7f00000002c0)="a705c5696169d8975720c90bfa526d44f4984eff63e2335b132037180d64f93359bf85c19435cc66b9f4f0d4108690a495f4b5c681c2494eef143eff4fed85e39d2d7738866e193b936bae4f85ede86eacd90465706269b1104df9ecdd8f12705cb999eaf3e6dc4da50995408c8ba03b804c8839b473623924dacf8de54320fe832da140a6c904ca2ad978fe5a7b477c03327732811f32af5ee3f606294840d2b5942ad0d08b2af521effbe041750661db4c2a053ef71fd556bd5a4c", 0xbc}, {&(0x7f0000000380)="43108cf6b5247c978d7b4e3169c27030ffea58d9f44bf8e468af6cc9a5e8e94eedc4a5839904092f55974107d7d327cdb96e046dcfbef13d50cc77d4645698bb0eebdf38d2845ba130e27b3c26d17d05dd44c4b2b35f310bd4b55d2fdf94526f52b918070bff5910d56a91e9a2b5247623270495d0037948bbe2d8e92ed5add7ea394c876a8634bea2575711b25c50808fbdf80e55f11ee0825909b69d19f92d51", 0xa1}, {&(0x7f0000000440)="63451b7ca804ea38e74febeac53d5c818e", 0x11}], 0x5, &(0x7f0000000500)={0x18, 0x108, 0x1, "75cd50"}, 0x18, 0x40}, {&(0x7f0000000540)={0x27, 0x0, 0x1, 0x6, 0x3ff, 0x4, "a6e6f9ce1f4a171cb67bc62af91d9dc8e69475b4e8354fb24774cc0fd9b6b4f67dc38e1897a1ba8e4ebcb8aee57ce304180ce116041d882bed7cb6cf27b33d", 0x1c}, 0x60, &(0x7f0000001800)=[{&(0x7f00000005c0)="7f0d127cfc84838f6b15a92a7f51cf3b96358b520e8a347a3cbfb9b9666ab691557c0dd69f52a720a1584d6e445d418ecd89776d7fe2b23a5f1929c3272b", 0x3e}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="9e9f7094942a462824cdcbbf26be26de834a06331b480bdf6d8c8666e74d0d5c0336284467b1c73ea09424bcf8dc44593ca3c9383d84545994f0a7dc764a8ae92494819d97a0c435f62f4fc369c03a4bab46973ed253d36dc9ac99380542b5637a879f98d4124e2b2f19bf075fdbf07299d87b0f538e56f011c2481f476083ee126f6bd9208991dd2b69d295bffd771e149779290cf805bf3e489f504f677bf2703f87b689ce144ba290cfb88368b56e434d3dfaa4c748bd5ce3b44669032490009858", 0xc3}, {&(0x7f0000001700)="438174abee411aa22c52e7abfd9bb2c05d2784f28eca379d6febb6d2b4ccbc8ee823d06c3528dbdd96c9fa97f9164b18df3bae857a184a65f117ed20f148c4d44c112347d73901d521aa96f7df18134db33048ef78c5b2c44942419ca4ad3aa67c07ba11b0a8e0fb7d8272ea52ade32cdcc22de4c23129199a46b5fce1df2cb453484370b4288c7825762626e29a7c0d11bdb474a34c3d32d01a7a911025b149006c93da060008f4984765af1fb28434bd801d8805663329fed84bbbe4de8cd8327d12065ae1885348a0da4a94dc053f59fb2312d364be3df01784705764ce06ac47fc0ec3d8418c0cc20294ea4db7a82f8329025c02f1592d", 0xf9}], 0x4, &(0x7f0000001840)={0xf8, 0x107, 0x40, "d758091fa6acd85c718ee4040cfdd268dcfb535e96bb8a21d8a992994167cdc7cb63af57e1aabeda378cf6c004886edcdcd02fcc2fa0d00e733a25179b88fe1b34face440d65baa8e3dc30fb2871f126dc2752921de951f971dc9f78ba77b180d8d05dd1dc1ae66c9795dccc8c9a13dd4020480593c68ee5bc9cd6bbc7dfd432a5a4fa0a2de8f5931a5ebdf40b21b67daf1e5638e815c596762fa7543ae281406372fc59ae9ec4974441fa55e0d920606ce85501f54b9cd8631935fbfc21b2adc25e106e5814ef841d1c102d8c1203ad3757d2dd32c56fcc3174a5038ff1536196cd7e783c"}, 0xf8, 0x90}, {&(0x7f0000001940)={0x27, 0x0, 0x2, 0x7, 0x80000001, 0x4, "a58d95f94aa4041eb98c0eb81b4435911875e13866a4fd9cf9cb7daa53034be5a197597fb06c181acb2b4a52ea4690c15a0b0ba7193e946039e43a73ed0d09", 0x39}, 0x60, &(0x7f0000001c80)=[{&(0x7f00000019c0)="fdf3d40dfe1364dd20b270d35f33417f54a57ac8e7ecab323ac7fdac067cb776404987afcfb229267e009df9cf3cb91eb712002ac0a431d47c116a4c5aed7c0a9611f74dda3e58eeabcf1753f9ef7f853f01cedff4deaac4e3d79c2a5a47f227bb3e9a4b4272d1eabd010ff28ac8406865d774df9d4abb90f5f729e0e3e3d6dbf9562355f6ceb1d16f5971fcc62b39b07c490358a809493e8662b804959f", 0x9e}, {&(0x7f0000001a80)="9d99f2ced3f0b9e0378e6df317a9aff177cba71f5c3cb8b8df4a14e2b8a9f48d60a5955bddfdc34f0523a09c542b2d57665967594df84a75eb1399f40bcb633a8d104fed02b7d25191e994674388aea5278e2ddf3c38fd39f1dd340d031b2fed8d992af6db6c2440bde9f530dd430b6abda49fad6a6fa149e22daf433c3c2f95ddea6104eac0953ecc7b2eca73d1e066ce22f4468a063e20e682890cd5ac0de8ebe7b2d03934de56eb189a68688ee84b4ea377b2f6bd1a88ead340097ad616d1185dea20d866bb493d", 0xc9}, {&(0x7f0000001b80)="4daa33174ff8985880b7da07aeb74a9c23cfcbe9886df99e02c55ae7914bbcd7fd128888d1e5263e19e9112d6fc57b7b277a764990e8645ec9ee1f39f092c0443a44f8129b224c37b7661831b335", 0x4e}, {&(0x7f0000001c00)="8d54849105f36c1644f8bf55eeb3db6bc6907a0704fcb9b985e0fa19d47d9135a3498b820035991fd6257e6def797b05ec56a298e1b2cad41af598eef42baafa3c0f406631e797cbb713c05ac7304b9077ce677dfc372e92492d513ecace53e23fd5e261c4f7cb", 0x67}], 0x4, &(0x7f0000001cc0)={0x38, 0x107, 0x81, "615b95b40835a537d525fbde378becab921874de8c1ac8982bf22aa24a6a0c47cd265aa0dd424be0"}, 0x38}, {&(0x7f0000001d00)={0x27, 0x1, 0x1, 0x2, 0x6, 0xffff, "54ca61aa589980472833e10186af55446b6088eaa09a6d245fa7f62e63a3b50931ea8f921ee3dc74185741ffd83eddce7416f9fb8991b74453a798e41cc82f", 0x13}, 0x60, &(0x7f0000001e40)=[{&(0x7f0000001d80)="7a293803efb5450bf15594ecf7dd674cb38fb34f4be6dcbc4faa6655015b1f0fb05492cb892eee8efbcf833bff4938f1c7e06fbdf352317f9b8cf56b367ba598a80aae782683989e12e6bf31ddfd8fb627f3cb783a11452e4821c3f5dea1cd896f47f1a143ed6eef366a0239c81e5e24aab33c15edcd57b871e04b746639b149976cda8636206a8c3f67e6311339bff7b1178954b97660ff", 0x98}], 0x1, &(0x7f0000001e80)={0x98, 0x11f, 0x1, "09c9b8f0ee492634ea8addd01ae567a47e68e99ee3dc6c513355d8971092a2c265713e05bd26aac8787a8dc6d12e7101e709396119186e71d5884d3e5d93864c1a7b3e1e72c0d2dae1c15a8f6ad671caeaab7ee6484a2dcb13e67cd71db963e221ba177d95d398871866323e505431e6ba3a5169dabd3e1d59f17c6a120e76459b08bd"}, 0x98, 0x804}, {&(0x7f0000001f40)={0x27, 0x0, 0x1, 0x6, 0x4, 0xa2, "5cfec03c61ae3fea25f29678c4254a13d4afe749b92c167d0bbec329c8f1985b526a6a60c61ed5231239c1ed026f613d354a28202b8e69d3440e13792d2630", 0x1d}, 0x60, &(0x7f0000001fc0), 0x0, &(0x7f0000002000)={0x18, 0x112, 0x5, 'w\nqq'}, 0x18, 0x44000}, {&(0x7f0000002040)={0x27, 0x0, 0x0, 0x2, 0x4, 0x3, "6342cdff861cb595b38eeb8d9f4537d9988b6c1d3d4812555a90ee6c52ecf70a2dd933dcab8324b53ffce3ed1ba0df6710da8c44393cedb8180472cf55c572", 0x32}, 0x60, &(0x7f0000003700)=[{&(0x7f00000020c0)="42a60c4ee4a25358f25c036b47f67df12099ae5a713156b796107ebdc963a7dfb8c715db12093cd9e95111efc45e6a511b179bb2903ac15a3f6ed21d2c016da2a5dba9faa979ca37287f9f36edfbb46c6a4c1b2d8536c32b16f34adc7a86836fa28d97c763623794a008d2cdb625182a2311a70ba6fd35e9f40c631ee2bcfded4ca7520516bae5147dc0e86fd1047fb0a8ccc9b5d5eca882", 0x98}, {&(0x7f0000002180)="7f2e8d5bb1ac15a7612c6ad6e9ac62ca334ff9928b1a185c52e2883c298ebac14be263c90a73098bda914cffcfd5efbbfa3ee0d2901bce64d882fa7acc6efa0218ab85237a268f1a889f", 0x4a}, {&(0x7f0000002200)="41b0808ed9619a25dbbe95371819f91e24e831c9cb7b8d6071d742f6d58db5bc6af014eee436fa8f56d3ee1b3d1ce08764b8c93162c092f1bff56bad5f8089e3333dc0cf7198d538d57d670505726f99565655276f83b097394c1375a705890204ab05be541b6859cc818822b2c6b40c5becf13ffc34098683cdd39d8a6b82b71d7e66675c2599b9a4dd611ef7a9d5d9a8d29c5ee3a1a4e95d5351bd4aa0cd28fec7ee9e226b90fbd02151f3a933eb301a36c8152cad036f950e345b28c876124e56c13d6f71c50520d6f7287b1013b49015c2e0d6f213235b7cb273afbc4ce9034763ddd384a450cb7ad447c025b96c2b5e3ec30009525affb74cdc3016b255497e4f15a9b42b533b92d193919311f52dc6b58766a8f7d69c6b87087963a144eb7644ddc1914c384b9d8d2a8e98479cdecd32e2ed6b53b0240962d9a8dc621860fd44364ea009a5471986591ab26d80ed6117f4ab1c1bf9ed14794af221134f006631e16ca9c09e5052518645fccbfbae09f059dc782008f10f279570976807654d49f4ab432b8777a46681f8fc9dd86eb38ee424268841985ca476fa0ab312b29123ae4da7000f3b786bec70dadb8e823e35c0bb4e6dfd9d76fcfaee52acb66742b5684b1aa9b7dc005a4f88adfe393d644a0b19eaf84875c2638eefde734a48301e95ad8c182b4d7f8e5a7f56b982d3f854c7fcb641a13e1721274cd7df9f81a81f2732d10dd20aa783169206035bd79cc9cf43360fdcff503a33c0fc69fba18f90e9d7603a82f1b4c8d9ea01a0cad3a63790bf245a57ab552867bbda981771ce892d21ce3de4ccf36e3a5ba2562f865b005ce2d4c383cbd6330ff99d8eae306eeff1554642f7b8834c9263ec3f37373130fc5cfa09317593482613fbb935ecc3f7d58fd70777dbe02a65b2511ecdc02f7eacb53d35ea7de252c50181e0d1152f83ff7cfa5e5ebe0062aae96aa3096807b99332fe3f395b4eee13f2f9dde03988fc8adc24a73a7e2698afc1a35f07a25982b19c55a02c84af9ee5bb0a651cb7a3cca630b3a39d25d6e15b38c5b71b1de58e01375275757f9f3cd9fb4c7fb849c19676338cb112c3900bca5a3807f9d54abd4cd43640a3e03e02abde081852b298d93840083b2fb3f779b644d3b0f911647066dcea8495ffa328779636eba31236830b14647526d17f9ce98c7547c376b091893673283c9b18d09e510ef8a0aed670a9100d27ff169d6ac5a20b92bb74e6f656994c1cdf63408bc5f505302bae7c0ef18da83255ce02bdd7bf5b9798021ea5e540e2872c813db9d341156a7fcb0465cd4cbee37d03043c6c786e02ce322d232f1c98f34c73374a54ccfcb9a37099e9263cf29c8f8badd5340fbdf58be92ae1d902fd2c9949a5bc094629aac454ec4d2df5c7dd17d0eb3196e259e2d3cf4588f1cdb9f53cf9ca4cdb65ebd76aad4194dca93762b0eeeb8cadb4d6da01f67f8252c4a0894f88c08bfa1d07ee6f3c8bb209667ded1da33a8e8a59dd4155b7fca4f3223951b1f117856994b81ef92a2ff91df2f416d1158dfea7ce50b8bf9b66fe80c15606b33ef2a7e9c06b15c96c96d7c45a434533e41f2f62a45569cf3d77a5b4e01fe9275050d12ac10c06344b04cfceb7d4cf0d942b1976c795cf03d1e50dce16e8ffddabf76a78b2577309668b4bc6b37dc65320ef7815759844f0dacb6048a11042af5437133609061c333c211f78755f90acd0bfc9ae400b34f1d5a095452046241222d4d3e82fc8f3e14ee1ff71b10a740779740a6e5b64f76bf3d398036b2bb15afa22b03318c22af802534505eb2c17b33c5b75364608f53f7267d5c6dae971beffddfe7ea691b6138af3095f766cdb0776216f4c9d7c0e91c8be3d4e5f06aa72cd411f4a95bef9f9f984a3d4a7c6d67787d372bd2e4cd43cdfb8313070686a96705166f9f34d09028031dc310c7368c9444abd0221c864eb1329e2abfa9be62572e6cb0d6abca71b6817b0e6bd1c4f9d1ec90615fe72061798bb6bacb83b6aceb1bca3b0acb339e13a55f122328b0ed05d48e0f7eef91aeabaf815823adcba626cf08eca236e39f3c74b757155c90f584cbefcb6419cc191193378b9c5923ef3ec5b84bfb37137e26de49223ee529cf215dfab9344c760f600f4c640533837f64533474c83c5e3c26f59a0e4c24ea9b55e368e28a11a905c262682619ddf788aeb87b04132ffac65d95b8d11b97778fd6bd4120d3c9c1ca03e6bcc0c5ca20625ad322ab5764740637d16ec33163c1e7a5dffd701a37792c93f8275708e9c02d041d4afd7a905b7817e7395db68d2195981fcff1bd0cd4eff810383a1d296c2f089cf44da091037a176c5334929e8b88a60007125eaac125f180d0bd31f0ecd41b4a4329bcd1d6b304792d95ea0cf0d7f5cb06371006572d44838d5b378383f4cc30531a16203c2878091bc6fc680109e829b52331f8c3e776a6c0056903ff160a91de9bec347d10d96e9012f8d959fd31e06d14c55837508c87bb3a90bee3047ea7f585debb7d1c7824cbb7abe1a8c57e6bd48bde5c8b6be8dd0a142f504fefded716d982fbe4ecd7e459ef8c02e8c484ab536f14d66f082066fa1ad58dd8a9bd13fbd41d62f7d6b813edc7d17d1aa8099b8a1851a6db333361519585ec896189d0e32f0c4cd70951c8487619ca6503f2cb70af5e09e4529e9533a6fc4d9901936807ba6ac86e1d8f38a62fa0ead9e3912f81be15617a2005fb3149350d35b86cb7f4b06e4e3a50ce3bbe2b299f6855514266260e8a1594ae979c349c70a657ed1c3a957be0967f306256ae226e002839680075369c7eed6b0633db70aada682854da9bdf0c7a8a68e1b52bd72dfdc0f29b033e830c95e6ac80196ba6bf863518fc2b77eff8e65af5db99de6351abf8e8fcb77465706a18bbf97cef557787df94874886b2c1fbb7d090241f60c055d4abcea28ae35f1506800f6fe648aff2179a4cf74ea6384485e6799939000f4d09f7b7dd2010937257e60487e30b64fc8efb3e105254bfd2f228dd7fadba6077ef54f2c37d30b552a96bb9fe6254115313bc7dcf83cf48d041e857665f3e73dd7fbed498db742c9262044bf97bf9c14d24b6b3dae9129977a1f174be62acf6e4eb885a381ee7e76ade58e582c704f9cc7c729c3fe0b65a023d8be7e542b1be064e77ad0de79240d09e8f68ac73c78e9d18c53db5b1163a168649be4ac66a0c2370683f77294690226c1b499ee72cc402191b45c4c00059cfaa6fca16036897878c001f333b7e37163ade8326d151f74668393c06cd94a1a8d221d7c0694756717ff959aa8a7f86a9626e90958d236fd650768a5a8ebf606fee65202258cf92ad24080761bca6dd88c11d91a429e7e303bba1fd3dbbeb8dbfea7ca1bc33c4b43a6aeadfc9feaed01bbbcf32e19efe0a4056b66bcc466925922a8db5a97a753ce5e7bf0fdce46a3e50f0a8e2724bdd071d8a83aab8b64e7c034a85e213dae9147946c040cc2c8ffdccab13530a345f36687ebc7b79445bcee0cc96a15bac816a0dbf37e33b8dfaaabca0d2bf8ee1905acf99a67f6768b0006e6fd735984d5ea1622e3846ebcb22806a1c818af77fc3afb490386cefd56780f0f097c964c8769529535b716bc34a25fe7e41fc0eb2741eff64984ab4af1c14b6469d2531494f521f8fd049b14d5a138f03e855b3410411be99d4c3e57986fa11124413cc7cbb2130d8eb79b8dd9b45471c7e8e8bc91845d7b620237f41a58d288eaca760177b83ebfcb85961a32c45a66be3f98101ab5c93cef233567cb09a97ec5bf342526f43eefc1558f6bfa57e2c1239edabe21a67547024a65e731caec4476a421b724b2a01153260dac949c0d3e94f0dc52f4fd5936484d09320ec62eff5788300c4a4d715bd718fe8b9f9ae784c768503afcde47dca2d07770ad6caeca4f8390ebd656dca7e7e4f5aeb95427262bbc0a1821eabc628e203300e549a325b813feda476b88b4cea707bd7bcd25f59d62a8069c23301abef8b62122d5c637a56274eb0707a5d7711a63256fffcb335bf3998f8c7ec7ad4cd85fac78760a9d8c2231c1d4d378216c94bfd3c19a9562c5bd2faf940cd3a4c1ea039c9375affb6e69481f4609fc1e7d5536efd88bbc80701c388c20ec1fc1538cf170654d517c843a452c8682ccc8d189cbdd60359fcf68ce18075b2359455866fe7a610056c81425c466b84b79b6c879652f540957fd1d91e6c03655ee5b302701cb656f9bb508b0b3199d37a407e444ecf41f0f82ebf286a21fedef52ddc294dc651df9bd8f6022fff78eca3cc3cda09ebd13937bb95876a84ebc482f85e2936f5a957989cf844cfab9aa687e28669be3fbffc214545be9b743cdadf2747c863b4d7969d9ef5fb31d711d3cff2499f2b195cccd9fd3629e518df1b301403e6791ee2576e5c8a7b4776f7aa3a1aa32ba9511d57e18d2b53b9a2efcd01c7ca83b91164bd1a99fdf5b0ab718e6a1085cd7a7383ff25c931a2e546f60350046a229a028b124f02553c431cc8242e51dc6eea0c7119e3d9001df6e566ea16b691510e1634c0246c411a596e4b96e30e8fdf3f4d72fb6721db1fce255eb15c7dbb9ff6e8088279141c894925e797514b9e1c742338fc0d659f4a0c0cece6674932a1aacb8fdc98e47ab27abc8142cdf133251ffd7bdffbbe12e3ae1219e03123f0d3287d087ffd7f25d7a2ecd005d5983acef3f03f6a2b71dc0619eefb7039fc77670cdf1c22dc16bdc8cf602903f09c98c7a11dae861eda157afee194f6518a2f510625f017a98ee57f38a27e4ce5be92434154a424d9c1085b1cd985936052fcb66bb7b5a78a4d1e6b416e1998585eb23aff80de371c647028862a6db4901600112f9ca0d052a02f68e1a5b77060c7160054e10277c574b19ed53be4a49f031f6259b183e1c3bcab333a14329e6c3d8fed4e4a3fde2640b8241542af08c12f1d30090874cdeb1e086f91b285fe8344431efee470b44a7025e0021b34b98376745d338a781e13c5a943acd46509a2f451df5f80ced9d99f616c42e06eb6e71377931cb61d813c8cf07f3a1996c18b9dab87362dcd9dffdf484443a6522eeb98aabadbaa5739158bfcd737a3c265b0a830b6364ed014419b4f27eabe4f1e21ccb5d69e02ed3a5f04ec357a77ce48c28e54294cd75f27d34f065ff42466f13543d7c938eabc3cb1c215d806a7701d85f6ccaaf61ba3d6ecdffbb9df7e38f8cfa01725efd7276bd6025fb1ff97fe3da6e9a52b3a8c598acd88da0481c0b0f79464bd9f1f474860c45feff915ccd61ebf422ec8b37709656eef1054d619d1346636b138feb2f74a78244678cf86d1192956ec87b38cf7aa972cc0edb697c5d5f2ed66ed2179f6bfc6afbc68fcca3f531b5fd56e59a4945bf713e3a02903be8bb044556ff58450f3461aa9caca8e7741b566e2b6e08fa174a3079cce9488caf34f473d927f3eb046b20c58916a3b3da37a89a51ede14a6549eb4c608e4149a39aef359eb71b62b68f8cc4db9d47c010d0f54f1d5d419d2e8e871e88a4794680f7cb3518ca645575c96f916b94cc42a4c997002dbc97844e7ae9dc83fb6f217aa09fd5dd98a124e8ffdaa98bb19f88229856877c8339e5d3645eb8d5e93949e4fc7d63aab512a940309b2f812a6f00d96a636b80ef3b36c1221dcbb0cd2ab604671bc088a70692e93a27d4a51b2ffb239832861b0c9ccea13bef84ccc933d3b712f39681c14546d4a5ab685b2837e1826ad18fdcbce23e1cc34783e81a4d17ece562ab22f1fed86681892471", 0x1000}, {&(0x7f0000003200)="ba22ab94021a3aa356277340e4ecf0d79974870c2a6fbbf655d9c92ab773e811a774e3782562c86eff2fac6d7ec5aac9ee4c119eed6d8995622ca2a47f862dd592e4d2e00d2a", 0x46}, {&(0x7f0000003280)="08004f86a3880aa3322e82086f80e8be19b0f75e8e11293ee55e3ad184a97ba73e3472bef3d6a5f9ef315d5342ade7620a16a63ab750fe38967d8523ab384185a26802b3cc283796916b3f64b3f05cb20c8bc4b221107c661dd50de2bff7782a04267420012fc371df142da8e0fe0e9bff02de447a4c1b442b8e64d4e56fea624301b63ae2729dffbf881d9aa4e4187f138b0160eba4c64916ae25ac454a2987ddf2ad334cb07733465bc9b6aa81d031684b61c1471544e8af03e1084f375a62942f5472", 0xc4}, {&(0x7f0000003380)="d37959008517a892056a17feaab8a770e45ee82b09f6d5a5a88b71fe4b953892dd646f07a3bae7f87967d9fb9aa7340e924ebf1f020ef5d308d3db219ee0de821769bd4ee917360c83dbd43d62f9225031f2184e85f133dd88e3d663e0712a775ab6ee1952adabab9c66aba95538480a7959", 0x72}, {&(0x7f0000003400)="daf8a5308e32c85402f39b459247db316dbac16354a43b31f5c68f6a70f8a662618e811131f9", 0x26}, {&(0x7f0000003440)="12e33bc689c3e715a143fa895ccda0ce96068c95fb0616a8ac2dd59c9693e979ebbbc876bb3dbfcb2e3ab17e110e4b43dc60c69411262257dea416281dfd5278eaba35d4dd0f2d122b8957fb5cd3c70e8edcb47620780db1be34369abd06f28b692d72143ffaed171ea190f63dec4bcf572918aba2cf9cf2330b32b52fd30b53ee2f8471a3b815fa1ea07797ebee5f16aab4f160c9bfe7dad83396", 0x9b}, {&(0x7f0000003500)="b8849c421e8f4e5ba93aa482ae31e6d1e1395dabc352bac8d18b69e2eb3171afda03477d46e61327ca66a05baf60efd4debd9f8d97e51288022bd192780f73199b965717d4fdf2d468a5e4c5c7662fc5f15f6af9817ac91b242bae117ae557285da48ab8984f990da226286ad00e6acf4aa9d8faa0f565046f2121e625ec75319a02138c8adc318feb3773fceedbbdffa1aa90b4a20cc6ae52ba44eed972f303b3774df6a889fe2aa39161bc919573da2a88162a0ccab23bfbe53bf4eb81cf2561fa3b2f8f0b77e7008d3b599e334535bc08d1cfe3798d586a89", 0xda}, {&(0x7f0000003600)="04117b5981ee02093a9bb5aa6157b98dd7f04b34435f0db3d9d34ababa673ba764eaa11ec9e10d49f66468940f1ab19083b466d44204e55e8933d4360bad1cacd1e58b4865118ecf3a35263322d111808b7e37dbc7d9ad0025b6cb710ff670963055087a45dc0835c62ac277f70acf8c7a7189dbf29630ff4be290419387a7f3bb9a6f02a113fd4bd8049132d87314c648876932fc9a0684dae8808c26f1ac199eae974da5ae8a4924174f1bf38974cf92d088dcdc43584bd495568b6212116ca11f6aefc7f5ac844fe89e0d8a8327ffb03cc6973ee56c148512f9f6d105f2f03da3c76cbbc69bf966d253", 0xeb}], 0xa, 0x0, 0x0, 0x800}], 0x6, 0x20040081) 03:53:59 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0xfbffffff00000000}) 03:53:59 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:53:59 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:59 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:59 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") chroot(&(0x7f0000000140)='./file1/file0\x00') symlink(&(0x7f0000000080)='./file1/file0\x00', &(0x7f0000000040)='./file1\x00') r1 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x9, 0x1) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000001c0)={0x0, 0x6, [@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xe}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1b}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}]}) utimes(&(0x7f0000000000)='./file1/file0/file0\x00', &(0x7f0000000100)={{}, {0x77359400}}) quotactl(0x2080000201, &(0x7f00000002c0)='./file1/file0\x00', 0x0, &(0x7f0000000240)) 03:53:59 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x800000}) [ 348.663353] device syz_tun entered promiscuous mode [ 348.673066] Dev loop4: unable to read RDB block 9 [ 348.678101] loop4: unable to read partition table [ 348.698969] device syz_tun left promiscuous mode 03:53:59 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:53:59 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) [ 348.741529] loop4: partition table beyond EOD, truncated [ 348.747362] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) 03:54:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:54:00 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x0, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:54:00 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000200)=0x4f, 0x4) sendto$inet6(r0, &(0x7f0000adb000), 0x0, 0x0, &(0x7f0000809000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0xffff, 0x0, 0x80000001, 0x0, 0xc5f1}, 0xc) 03:54:00 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:00 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:00 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0xd00}) 03:54:00 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:54:00 executing program 4: socketpair(0x8, 0xa, 0x2, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000700)="262f257573657240707070316d643573756dfe76626f786e65743170726f6300") r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000180)=[0x9, 0x3]) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000240)=""/235) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = getpgid(0xffffffffffffffff) r4 = fcntl$getown(r1, 0x9) sendmsg$nl_netfilter(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x374, 0x0, 0x8, 0x108, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x9}, [@typed={0x8, 0x1f, @ipv4=@broadcast=0xffffffff}, @generic="2bffaedf4d5cc9706df5ed8d741f50e9f4a79ffd00ee4feaeaa75fe3e03874e68e0497f4d4e69c29c96db78d82becda2a3f21e341e86", @generic="fd1a27ecf9235c718212f5cc0c59e43e2d", @nested={0x1a8, 0x6f, [@typed={0x24, 0x88, @str="262f257573657240707070316d643573756dfe76626f786e65743170726f6300"}, @generic="01dcefe25add919d378d2766d1a927ca65b065b9116f34d2eb8f47685ac7434eaac4d693db96a3542ad2761dd7507ecb19aaeef69bd6c748081904e19686108dbb3844dd0bb108533516c9ffad3001b9ab72148c12955496a16256a967d7f90f7b95a2bce10eaa4238de429c7711fd90edcb740bb917e96cf258a535273064d72c4432a849ed4f6923638527932ddca830813c6f6e124ba5c853022907edc79362510e8aabee41", @typed={0x8, 0x5f, @pid=r3}, @generic="531e8bb1338023e59251627fca1a32d4e28a479b7eee3680b390cd4705d5c3b53b6e1b0a6d10372b9b80393b46c963e37d46f29a573e56c414f31d366acd821b481d38d63e7ca19c059d323fe52f8984df2fb2000c0ef8ffa545cedb2f738c75e43b32605f2a1f63c68ed1ec2a2b48eb461fa7dbd75a6f553f9ce415d8eab616fe937929db062b9b3698a04fd5dbc767cf95d2612e5b91d18c475d6a4bbeb6c6d44260dc3f9a2e26869e3641996620935e9a4b183b58d7d14595e251edc53a31", @typed={0x8, 0x4, @str='\x00'}, @typed={0x8, 0x19, @pid=r4}]}, @typed={0x20, 0x4d, @str='cpuacct.usage_percpu_sys\x00'}, @generic="fb07144dbaa447c25b6a9f2812e76af2cd4d19cdefd949ff6f54ba8f751b3b6de7b5bfc8bfda1becbf7551e0c97d622ea9678f9e52f73c880c6356d19c8474e703d5b1052659c26950f070a0820f3ed33b9d4a7fa6105f52e4c01491b79610549eeb090aca2e35f165689ac0620eb551dbfb96dec46ddfcbb5fc5434016d763e53d9426935f9ec420e5d2ecb5587fc4e940a9ab6b033d1cc6df269b0b0833e47d689aa6a55db77088fb8d39a83", @generic="a282c943be782d3fbff8c85eb3ad2e1473881c7639fb724c746d1ab5cd079008ddb5ca57342d27afdeac02a3bcb3b9a16c9153dbe9c39623fe18259d174830e663b962a312d98ba07564c9dd1f6bd01864a9b54ea324921421b8576779314fd6a60b83a9ef7686566d9ea37d6aaf5f7cef5d3ae442fa9360e8dc461234ab426bd1bfe203fa6823083b2899b466f110900b529710dac2664fd3b22b"]}, 0x374}, 0x1, 0x0, 0x0, 0x40004}, 0x4040000) sendmsg$nl_netfilter(r2, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, 0x0, 0x1, 0xfffffffffffffffd, 0x0, 0x0, {}, [@nested={0x8, 0x12, [@generic="04"]}]}, 0x1c}, 0x1}, 0x0) 03:54:00 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:00 executing program 7: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='posix_acl_access]:em0keyringem0\x00'}, 0x10) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x80, 0x0) dup3(0xffffffffffffffff, r0, 0x80000) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$KDMKTONE(r1, 0x4b30, 0x5) fanotify_mark(r0, 0x4, 0x810, r1, &(0x7f00000001c0)='./file0\x00') setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000100)={0x2, [0x800, 0x1df]}, 0x8) 03:54:00 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0xd00000000000000}) 03:54:00 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:00 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 349.527580] netlink: 'syz-executor4': attribute type 18 has an invalid length. [ 349.548693] device syz_tun entered promiscuous mode 03:54:00 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(0xffffffffffffffff) 03:54:00 executing program 4: socketpair(0x8, 0xa, 0x2, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000700)="262f257573657240707070316d643573756dfe76626f786e65743170726f6300") r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000180)=[0x9, 0x3]) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000240)=""/235) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = getpgid(0xffffffffffffffff) r4 = fcntl$getown(r1, 0x9) sendmsg$nl_netfilter(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x374, 0x0, 0x8, 0x108, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x9}, [@typed={0x8, 0x1f, @ipv4=@broadcast=0xffffffff}, @generic="2bffaedf4d5cc9706df5ed8d741f50e9f4a79ffd00ee4feaeaa75fe3e03874e68e0497f4d4e69c29c96db78d82becda2a3f21e341e86", @generic="fd1a27ecf9235c718212f5cc0c59e43e2d", @nested={0x1a8, 0x6f, [@typed={0x24, 0x88, @str="262f257573657240707070316d643573756dfe76626f786e65743170726f6300"}, @generic="01dcefe25add919d378d2766d1a927ca65b065b9116f34d2eb8f47685ac7434eaac4d693db96a3542ad2761dd7507ecb19aaeef69bd6c748081904e19686108dbb3844dd0bb108533516c9ffad3001b9ab72148c12955496a16256a967d7f90f7b95a2bce10eaa4238de429c7711fd90edcb740bb917e96cf258a535273064d72c4432a849ed4f6923638527932ddca830813c6f6e124ba5c853022907edc79362510e8aabee41", @typed={0x8, 0x5f, @pid=r3}, @generic="531e8bb1338023e59251627fca1a32d4e28a479b7eee3680b390cd4705d5c3b53b6e1b0a6d10372b9b80393b46c963e37d46f29a573e56c414f31d366acd821b481d38d63e7ca19c059d323fe52f8984df2fb2000c0ef8ffa545cedb2f738c75e43b32605f2a1f63c68ed1ec2a2b48eb461fa7dbd75a6f553f9ce415d8eab616fe937929db062b9b3698a04fd5dbc767cf95d2612e5b91d18c475d6a4bbeb6c6d44260dc3f9a2e26869e3641996620935e9a4b183b58d7d14595e251edc53a31", @typed={0x8, 0x4, @str='\x00'}, @typed={0x8, 0x19, @pid=r4}]}, @typed={0x20, 0x4d, @str='cpuacct.usage_percpu_sys\x00'}, @generic="fb07144dbaa447c25b6a9f2812e76af2cd4d19cdefd949ff6f54ba8f751b3b6de7b5bfc8bfda1becbf7551e0c97d622ea9678f9e52f73c880c6356d19c8474e703d5b1052659c26950f070a0820f3ed33b9d4a7fa6105f52e4c01491b79610549eeb090aca2e35f165689ac0620eb551dbfb96dec46ddfcbb5fc5434016d763e53d9426935f9ec420e5d2ecb5587fc4e940a9ab6b033d1cc6df269b0b0833e47d689aa6a55db77088fb8d39a83", @generic="a282c943be782d3fbff8c85eb3ad2e1473881c7639fb724c746d1ab5cd079008ddb5ca57342d27afdeac02a3bcb3b9a16c9153dbe9c39623fe18259d174830e663b962a312d98ba07564c9dd1f6bd01864a9b54ea324921421b8576779314fd6a60b83a9ef7686566d9ea37d6aaf5f7cef5d3ae442fa9360e8dc461234ab426bd1bfe203fa6823083b2899b466f110900b529710dac2664fd3b22b"]}, 0x374}, 0x1, 0x0, 0x0, 0x40004}, 0x4040000) sendmsg$nl_netfilter(r2, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, 0x0, 0x1, 0xfffffffffffffffd, 0x0, 0x0, {}, [@nested={0x8, 0x12, [@generic="04"]}]}, 0x1c}, 0x1}, 0x0) [ 349.589510] device syz_tun left promiscuous mode 03:54:00 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0xd000000}) [ 349.622696] device syz_tun entered promiscuous mode [ 349.647195] netlink: 'syz-executor4': attribute type 18 has an invalid length. [ 349.670686] device syz_tun left promiscuous mode 03:54:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:54:01 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:01 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000040)={0x2, 0x3, 0x42, 0x0, 0xd}) unshare(0x400) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000200)=0x1, 0x8) 03:54:01 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:01 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0xd9000000}) 03:54:01 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x0, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:54:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000040)="f2446eb960000000b800000100ba000000000f30c74424000f000000c7442402eeae5562c7442406000000000f011c248f4848ed0b6dc4e1fa109df8ffffff400fc79ef000000066b82e010f00d8260f412dfc8700000f01cac442fd21de", 0x5e}], 0xaaaaaaaaaaaadad, 0x64, &(0x7f0000000200), 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000000)={0x10001, 0x4}) r3 = memfd_create(&(0x7f0000000140)='#em1#+\x00', 0x0) write$evdev(r3, &(0x7f00000000c0)=[{{0x0, 0x7530}, 0x4, 0x0, 0x3}, {{0x77359400}, 0x1, 0x100000001, 0x7f}, {{0x77359400}, 0x3000000000, 0xff, 0x4}, {{0x0, 0x2710}, 0xcf, 0x46}], 0x60) write(r3, &(0x7f0000000040)="06", 0x1) sendfile(r3, r3, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x80000000004, 0x11, r3, 0x0) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f00000004c0)) 03:54:01 executing program 6 (fault-call:7 fault-nth:0): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:54:01 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x3}) 03:54:01 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 350.368397] QAT: Invalid ioctl [ 350.388272] device syz_tun entered promiscuous mode [ 350.388372] QAT: Invalid ioctl [ 350.393536] device syz_tun entered promiscuous mode 03:54:01 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x3f, 0x80000) r1 = semget(0x2, 0x0, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) r3 = getgid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in=@multicast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000340)={{0xffffffffffff2411, r2, r3, r4, r5, 0x70, 0x4}, 0x1, 0x7, 0xb4a}) mknodat(r0, &(0x7f00000000c0)='./file0\x00', 0x4, 0xf84) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000440)={[{@fat=@dmask={'dmask', 0x3d, 0x800000000}, 0x2c}]}) 03:54:01 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 350.427503] device syz_tun left promiscuous mode [ 350.434243] FAULT_INJECTION: forcing a failure. [ 350.434243] name failslab, interval 1, probability 0, space 0, times 0 [ 350.445564] CPU: 0 PID: 23434 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180712+ #6 [ 350.453952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 350.463293] Call Trace: [ 350.465868] dump_stack+0x1c9/0x2b4 [ 350.469480] ? dump_stack_print_info.cold.2+0x52/0x52 03:54:01 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0xd900000000000000}) [ 350.474656] ? finish_wait+0x25d/0x430 [ 350.478531] should_fail.cold.4+0xa/0x11 [ 350.482587] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 350.487694] ? mutex_unlock+0xd/0x10 [ 350.491406] ? _synchronize_rcu_expedited.constprop.72+0x7d9/0xa40 [ 350.497719] ? do_raw_spin_unlock+0xa7/0x2f0 [ 350.502136] ? wait_rcu_exp_gp+0xc0/0xc0 [ 350.506216] ? compat_start_thread+0x80/0x80 [ 350.510654] ? finish_wait+0x430/0x430 [ 350.514547] ? kasan_check_write+0x14/0x20 [ 350.518766] ? finish_task_switch+0x2ca/0x870 [ 350.523251] ? lock_acquire+0x1e4/0x540 [ 350.527223] ? fs_reclaim_acquire+0x20/0x20 [ 350.531544] ? lock_downgrade+0x8f0/0x8f0 [ 350.535680] ? check_same_owner+0x340/0x340 [ 350.539982] ? dev_map_notification+0x4e8/0x6a0 [ 350.544637] ? rcu_note_context_switch+0x730/0x730 [ 350.549555] __should_failslab+0x124/0x180 [ 350.553794] should_failslab+0x9/0x14 [ 350.557592] kmem_cache_alloc_trace+0x2cb/0x780 [ 350.562255] ? lock_downgrade+0x8f0/0x8f0 [ 350.566398] netdevice_event+0x34c/0xe80 [ 350.570448] ? update_gid_event_work_handler+0xc0/0xc0 [ 350.575721] ? _roce_del_all_netdev_gids+0x30/0x30 [ 350.580646] ? roce_gid_type_mask_support+0x100/0x100 [ 350.585838] notifier_call_chain+0x180/0x390 [ 350.590248] ? unregister_die_notifier+0x20/0x20 [ 350.594988] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 350.600522] ? rtnl_is_locked+0xb5/0xf0 [ 350.604478] ? rtnl_trylock+0x20/0x20 [ 350.608278] raw_notifier_call_chain+0x2d/0x40 [ 350.612850] call_netdevice_notifiers_info+0x3f/0x90 [ 350.617940] rollback_registered_many+0x92a/0xec0 [ 350.622785] ? trace_hardirqs_on_caller+0x501/0x5c0 [ 350.627788] ? dev_xdp_uninstall+0x370/0x370 [ 350.632188] ? trace_hardirqs_on+0x10/0x10 [ 350.636413] ? find_get_entries_tag+0x1410/0x1410 [ 350.641257] ? lock_acquire+0x1e4/0x540 [ 350.645220] ? skb_dequeue+0x12f/0x180 [ 350.649093] rollback_registered+0x1e9/0x420 [ 350.653485] ? rollback_registered_many+0xec0/0xec0 [ 350.658493] ? lock_downgrade+0x8f0/0x8f0 [ 350.662638] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 350.668170] ? rtnl_is_locked+0xb5/0xf0 [ 350.672134] ? rtnl_trylock+0x20/0x20 [ 350.675920] ? trace_hardirqs_on+0xd/0x10 [ 350.680050] ? queue_delayed_work_on+0x130/0x1f0 [ 350.684803] unregister_netdevice_queue+0x32f/0x660 [ 350.689822] ? rollback_registered+0x420/0x420 [ 350.694400] ? linkwatch_schedule_work+0x180/0x180 [ 350.699312] ? tun_show_owner+0x170/0x170 [ 350.703486] ? do_raw_spin_unlock+0xa7/0x2f0 [ 350.707886] ? netif_set_real_num_tx_queues+0x10d/0x6f0 [ 350.713238] ? __tun_detach+0x6d4/0x15e0 [ 350.717283] __tun_detach+0x11d1/0x15e0 [ 350.721242] ? tun_attach+0x1780/0x1780 [ 350.725213] ? locks_remove_posix+0x464/0x860 [ 350.729702] ? do_lock_file_wait.part.30+0x260/0x260 [ 350.734793] ? pid_task+0x115/0x200 [ 350.738399] ? find_vpid+0xf0/0xf0 [ 350.741947] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 350.746799] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 350.752331] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 350.757852] ? locks_remove_file+0x3df/0x590 [ 350.762261] ? fcntl_setlk+0x1010/0x1010 [ 350.766322] ? fsnotify_first_mark+0x350/0x350 [ 350.770888] ? __fsnotify_parent+0xcc/0x420 [ 350.775211] ? fsnotify+0x14e0/0x14e0 [ 350.779009] ? __tun_detach+0x15e0/0x15e0 [ 350.783142] ? __tun_detach+0x15e0/0x15e0 [ 350.787277] tun_chr_close+0xe3/0x180 [ 350.791065] __fput+0x35d/0x930 [ 350.794337] ? fput+0x1a0/0x1a0 [ 350.797614] ? kasan_check_write+0x14/0x20 [ 350.801837] ? do_raw_spin_lock+0xc1/0x200 [ 350.806064] ____fput+0x15/0x20 [ 350.809337] task_work_run+0x1ec/0x2a0 [ 350.813225] ? task_work_cancel+0x250/0x250 [ 350.817539] ? copy_fd_bitmaps+0x210/0x210 [ 350.821756] exit_to_usermode_loop+0x318/0x380 [ 350.826326] ? syscall_slow_exit_work+0x500/0x500 [ 350.831177] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 350.836700] do_syscall_64+0x6be/0x820 [ 350.840569] ? finish_task_switch+0x1d3/0x870 [ 350.845064] ? syscall_return_slowpath+0x5e0/0x5e0 [ 350.849983] ? syscall_return_slowpath+0x31d/0x5e0 [ 350.854900] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 350.859900] ? prepare_exit_to_usermode+0x291/0x3b0 [ 350.864901] ? perf_trace_sys_enter+0xb10/0xb10 [ 350.869568] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 350.874433] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 350.879607] RIP: 0033:0x455a79 [ 350.882774] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 350.902477] RSP: 002b:00007fc0d2d31c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 350.910173] RAX: 0000000000000000 RBX: 00007fc0d2d326d4 RCX: 0000000000455a79 [ 350.917512] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000015 03:54:01 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:01 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:01 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x0, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) [ 350.924785] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 350.932045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 350.939300] R13: 00000000004eb5d2 R14: 00000000004c8d00 R15: 0000000000000000 [ 351.029655] device syz_tun entered promiscuous mode [ 351.037102] device syz_tun left promiscuous mode [ 351.049188] device syz_tun left promiscuous mode 03:54:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:54:02 executing program 7: io_setup(0xffffffffffffffff, &(0x7f00000000c0)=0x0) io_pgetevents(r0, 0x1, 0x1, &(0x7f0000000100)=[{}], &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) 03:54:02 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x80000000000000}) 03:54:02 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:02 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:02 executing program 6 (fault-call:7 fault-nth:1): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:54:02 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x0, 0x400, 0x2, 0x200, r3}) close(r2) 03:54:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x1, 0x116000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x1c, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000080)={'bcsf0\x00', {0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}}) [ 351.246674] device syz_tun entered promiscuous mode 03:54:02 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:02 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x300}) 03:54:02 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1=0xe0000001}, 0x4, 0x8}}, 0x2e) personality(0xc) close(r2) [ 351.268642] device syz_tun entered promiscuous mode [ 351.277773] device syz_tun left promiscuous mode [ 351.285519] FAULT_INJECTION: forcing a failure. [ 351.285519] name failslab, interval 1, probability 0, space 0, times 0 [ 351.296859] CPU: 0 PID: 23490 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180712+ #6 [ 351.305259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 351.314611] Call Trace: [ 351.317210] dump_stack+0x1c9/0x2b4 [ 351.321177] ? dump_stack_print_info.cold.2+0x52/0x52 [ 351.326389] should_fail.cold.4+0xa/0x11 [ 351.330528] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 351.336139] ? lock_acquire+0x1e4/0x540 [ 351.340097] ? is_bpf_text_address+0xae/0x170 [ 351.344592] ? lock_downgrade+0x8f0/0x8f0 [ 351.348728] ? lock_release+0xa30/0xa30 [ 351.352700] ? kasan_check_read+0x11/0x20 [ 351.356842] ? rcu_is_watching+0x8c/0x150 [ 351.361325] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 351.365996] ? lock_acquire+0x1e4/0x540 [ 351.369958] ? fs_reclaim_acquire+0x20/0x20 [ 351.374277] ? lock_downgrade+0x8f0/0x8f0 [ 351.378413] ? unwind_get_return_address+0x61/0xa0 [ 351.383339] ? check_same_owner+0x340/0x340 [ 351.387659] ? rcu_note_context_switch+0x730/0x730 [ 351.392588] __should_failslab+0x124/0x180 [ 351.396814] should_failslab+0x9/0x14 [ 351.400608] kmem_cache_alloc_node+0x272/0x780 [ 351.405191] ? raw_notifier_call_chain+0x2d/0x40 [ 351.409937] ? call_netdevice_notifiers_info+0x3f/0x90 [ 351.415222] ? rollback_registered_many+0x92a/0xec0 [ 351.420372] ? rollback_registered+0x1e9/0x420 [ 351.424952] ? unregister_netdevice_queue+0x32f/0x660 [ 351.430141] ? __tun_detach+0x11d1/0x15e0 [ 351.434274] ? tun_chr_close+0xe3/0x180 [ 351.438232] ? __fput+0x35d/0x930 [ 351.441671] __alloc_skb+0x119/0x790 [ 351.445372] ? skb_scrub_packet+0x490/0x490 [ 351.449688] ? trace_hardirqs_off+0xd/0x10 [ 351.453922] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 351.459013] ? debug_check_no_obj_freed+0x30b/0x595 [ 351.464030] ? trace_hardirqs_off+0xd/0x10 [ 351.468251] ? quarantine_put+0x10d/0x1b0 [ 351.472511] inet_netconf_notify_devconf+0xc9/0x220 [ 351.477554] __devinet_sysctl_unregister.isra.27+0x87/0xb0 [ 351.483190] devinet_sysctl_unregister+0x92/0xf0 [ 351.487951] inetdev_event+0xa8f/0x1370 [ 351.491911] ? wireless_nlevent_flush+0xd9/0x100 [ 351.496658] ? lock_downgrade+0x8f0/0x8f0 [ 351.500795] ? wpan_phy_register+0x270/0x270 [ 351.505191] ? do_raw_spin_unlock+0xa7/0x2f0 [ 351.509585] ? inetdev_init+0x590/0x590 [ 351.513548] ? kasan_check_write+0x14/0x20 [ 351.517765] ? do_raw_spin_lock+0xc1/0x200 [ 351.521988] ? netlbl_unlhsh_netdev_handler+0xbc/0x3d0 [ 351.527253] ? netlbl_unlhsh_free_iface+0x700/0x700 [ 351.532261] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 351.537457] notifier_call_chain+0x180/0x390 [ 351.541866] ? notifier_call_chain+0x180/0x390 [ 351.546447] ? unregister_die_notifier+0x20/0x20 [ 351.551216] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 351.556751] ? rtnl_is_locked+0xb5/0xf0 [ 351.560723] ? rtnl_trylock+0x20/0x20 [ 351.564517] raw_notifier_call_chain+0x2d/0x40 [ 351.569190] call_netdevice_notifiers_info+0x3f/0x90 [ 351.574283] rollback_registered_many+0x92a/0xec0 [ 351.579125] ? trace_hardirqs_on_caller+0x501/0x5c0 [ 351.584135] ? dev_xdp_uninstall+0x370/0x370 [ 351.588529] ? trace_hardirqs_on+0x10/0x10 [ 351.592757] ? find_get_entries_tag+0x1410/0x1410 [ 351.597587] ? lock_acquire+0x1e4/0x540 [ 351.601557] ? skb_dequeue+0x12f/0x180 [ 351.605451] rollback_registered+0x1e9/0x420 [ 351.609851] ? rollback_registered_many+0xec0/0xec0 [ 351.614854] ? lock_downgrade+0x8f0/0x8f0 [ 351.618996] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 351.624521] ? rtnl_is_locked+0xb5/0xf0 [ 351.628489] ? rtnl_trylock+0x20/0x20 [ 351.632297] ? trace_hardirqs_on+0xd/0x10 [ 351.636949] ? queue_delayed_work_on+0x130/0x1f0 [ 351.641695] unregister_netdevice_queue+0x32f/0x660 [ 351.646704] ? rollback_registered+0x420/0x420 [ 351.651277] ? linkwatch_schedule_work+0x180/0x180 [ 351.656664] ? tun_show_owner+0x170/0x170 [ 351.660803] ? do_raw_spin_unlock+0xa7/0x2f0 [ 351.665721] ? netif_set_real_num_tx_queues+0x10d/0x6f0 [ 351.671117] ? __tun_detach+0x6d4/0x15e0 [ 351.675179] __tun_detach+0x11d1/0x15e0 [ 351.679157] ? tun_attach+0x1780/0x1780 [ 351.683115] ? locks_remove_posix+0x464/0x860 [ 351.687594] ? do_lock_file_wait.part.30+0x260/0x260 [ 351.692681] ? pid_task+0x115/0x200 [ 351.696293] ? find_vpid+0xf0/0xf0 [ 351.699822] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 351.704655] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 351.710180] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 351.715704] ? locks_remove_file+0x3df/0x590 [ 351.720562] ? fcntl_setlk+0x1010/0x1010 [ 351.724621] ? fsnotify_first_mark+0x350/0x350 [ 351.729197] ? __fsnotify_parent+0xcc/0x420 [ 351.733528] ? fsnotify+0x14e0/0x14e0 [ 351.737318] ? __tun_detach+0x15e0/0x15e0 [ 351.741478] ? __tun_detach+0x15e0/0x15e0 [ 351.745613] tun_chr_close+0xe3/0x180 [ 351.749402] __fput+0x35d/0x930 [ 351.752671] ? fput+0x1a0/0x1a0 [ 351.755953] ? kasan_check_write+0x14/0x20 [ 351.760174] ? do_raw_spin_lock+0xc1/0x200 [ 351.764406] ____fput+0x15/0x20 [ 351.767685] task_work_run+0x1ec/0x2a0 [ 351.771583] ? task_work_cancel+0x250/0x250 [ 351.775906] ? copy_fd_bitmaps+0x210/0x210 [ 351.780184] exit_to_usermode_loop+0x318/0x380 [ 351.784772] ? syscall_slow_exit_work+0x500/0x500 [ 351.789614] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 351.795150] do_syscall_64+0x6be/0x820 [ 351.799029] ? finish_task_switch+0x1d3/0x870 [ 351.803521] ? syscall_return_slowpath+0x5e0/0x5e0 [ 351.808440] ? syscall_return_slowpath+0x31d/0x5e0 [ 351.813358] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 351.818364] ? prepare_exit_to_usermode+0x291/0x3b0 [ 351.823388] ? perf_trace_sys_enter+0xb10/0xb10 [ 351.828057] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 351.832909] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 351.838524] RIP: 0033:0x455a79 [ 351.841711] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 351.860954] RSP: 002b:00007fc0d2d31c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 03:54:02 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:02 executing program 4: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000040)='threaded\x00', 0xfd87) sync_file_range(r0, 0x0, 0x8001, 0x2) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000000)={0x357}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f00000001c0)=0xe8) setfsuid(r1) 03:54:02 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:02 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0xe440, 0x2) ppoll(&(0x7f0000000000)=[{r0, 0x100}, {r1}, {r0}, {r1}, {r0}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f00000000c0), 0x8) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000200)=0x20) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e23, 0x200, @local={0xfe, 0x80, [], 0xaa}, 0x39}, {0xa, 0x4e21, 0xffffffffffffffff, @dev={0xfe, 0x80, [], 0x21}, 0x7}, 0x35, [0x1f, 0x401, 0x5, 0x8001, 0x81, 0xfffffffffffffffd, 0x4, 0x1]}, 0x5c) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000000080)=""/24, &(0x7f0000000140)=0x18) [ 351.868687] RAX: 0000000000000000 RBX: 00007fc0d2d326d4 RCX: 0000000000455a79 [ 351.875942] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000015 [ 351.883207] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 351.890472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 351.897737] R13: 00000000004eb5d2 R14: 00000000004c8d00 R15: 0000000000000001 03:54:02 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x0, 0x400, 0x2, 0x200, r3}) close(r2) [ 351.987925] device syz_tun entered promiscuous mode [ 352.001503] device syz_tun left promiscuous mode [ 352.007984] device syz_tun left promiscuous mode 03:54:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:54:03 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:03 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x3000000}) 03:54:03 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:03 executing program 7: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x6}, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000140)}, 0x0) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f0000000400)={&(0x7f0000000040)=@un=@abs, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000001700)}, 0xc000) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000001b00)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000380)="c9", 0x1}], 0x1, &(0x7f0000000200)}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xfff, 0x40000) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f00000000c0)) 03:54:03 executing program 6 (fault-call:7 fault-nth:2): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:54:03 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x0, 0x2, 0x200, r3}) close(r2) 03:54:03 executing program 4: prctl$void(0x1e) recvmmsg(0xffffffffffffffff, &(0x7f0000005f00)=[{{&(0x7f0000000000)=@pppoe, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)=""/39, 0x27}, {&(0x7f00000000c0)=""/224, 0xe0}, {&(0x7f00000001c0)=""/182, 0xb6}, {&(0x7f0000000280)=""/137, 0x89}, {&(0x7f0000000340)=""/153, 0x99}, {&(0x7f0000000400)=""/223, 0xdf}, {&(0x7f0000000500)=""/113, 0x71}], 0x7, &(0x7f0000000600)=""/185, 0xb9, 0x4}, 0x5}, {{&(0x7f00000006c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @local}}}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000740)=""/168, 0xa8}, {&(0x7f0000000800)=""/147, 0x93}, {&(0x7f00000008c0)=""/109, 0x6d}, {&(0x7f0000000940)=""/104, 0x68}, {&(0x7f00000009c0)=""/178, 0xb2}, {&(0x7f0000000a80)=""/254, 0xfe}, {&(0x7f0000000b80)=""/200, 0xc8}], 0x7, &(0x7f0000000d00)=""/252, 0xfc, 0x4}, 0xfff}, {{&(0x7f0000000e00)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000e80)=""/173, 0xad}, {&(0x7f0000000f40)=""/91, 0x5b}, {&(0x7f0000000fc0)=""/129, 0x81}], 0x3, &(0x7f00000010c0)=""/36, 0x24, 0x5}, 0x100}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000001100)=""/40, 0x28}, {&(0x7f0000001140)=""/127, 0x7f}, {&(0x7f00000011c0)=""/187, 0xbb}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000002280)=""/219, 0xdb}], 0x5, &(0x7f0000002400)=""/217, 0xd9, 0xffffffff}, 0x3}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002500)=""/161, 0xa1}, {&(0x7f00000025c0)=""/150, 0x96}, {&(0x7f0000002680)=""/72, 0x48}, {&(0x7f0000002700)=""/163, 0xa3}, {&(0x7f00000027c0)=""/21, 0x15}], 0x5, &(0x7f0000002880)=""/4096, 0x1000, 0x6db}, 0x5}, {{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003880)=""/141, 0x8d}, {&(0x7f0000003940)=""/202, 0xca}, {&(0x7f0000003a40)=""/49, 0x31}, {&(0x7f0000003a80)=""/3, 0x3}, {&(0x7f0000003ac0)=""/81, 0x51}], 0x5, &(0x7f0000003bc0)=""/66, 0x42, 0x80000001}, 0xc4}, {{&(0x7f0000003c40)=@in={0x0, 0x0, @broadcast}, 0x80, &(0x7f0000004080)=[{&(0x7f0000003cc0)=""/226, 0xe2}, {&(0x7f0000003dc0)=""/146, 0x92}, {&(0x7f0000003e80)=""/163, 0xa3}, {&(0x7f0000003f40)=""/74, 0x4a}, {&(0x7f0000003fc0)=""/26, 0x1a}, {&(0x7f0000004000)=""/74, 0x4a}], 0x6, &(0x7f0000004100)=""/78, 0x4e, 0x100000000}, 0x7a}, {{&(0x7f0000004180)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, 0x80, &(0x7f0000004640)=[{&(0x7f0000004200)=""/16, 0x10}, {&(0x7f0000004240)=""/191, 0xbf}, {&(0x7f0000004300)=""/92, 0x5c}, {&(0x7f0000004380)=""/147, 0x93}, {&(0x7f0000004440)=""/149, 0x95}, {&(0x7f0000004500)}, {&(0x7f0000004540)=""/231, 0xe7}], 0x7, &(0x7f00000046c0), 0x0, 0x1}, 0x400}, {{&(0x7f0000004700)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000004880)=[{&(0x7f0000004780)=""/75, 0x4b}, {&(0x7f0000004800)=""/78, 0x4e}], 0x2, &(0x7f00000048c0)=""/176, 0xb0, 0x6}, 0x7fff}, {{&(0x7f0000004980)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000005e80)=[{&(0x7f0000004a00)=""/196, 0xc4}, {&(0x7f0000004b00)=""/4096, 0x1000}, {&(0x7f0000005b00)=""/114, 0x72}, {&(0x7f0000005b80)=""/190, 0xbe}, {&(0x7f0000005c40)=""/139, 0x8b}, {&(0x7f0000005d00)=""/241, 0xf1}, {&(0x7f0000005e00)=""/86, 0x56}], 0x7, 0x0, 0x0, 0x7}, 0x4}], 0xa, 0x40, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f00000062c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000006240)=0xb8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000006280)={0x2, 0x8000, 0xfffffffffffffff9, 0x100000001, r1}, 0x10) 03:54:03 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0xf6ffffff}) 03:54:03 executing program 7: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x18) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") close(r0) 03:54:03 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 352.108392] device syz_tun entered promiscuous mode [ 352.118827] device syz_tun entered promiscuous mode [ 352.131659] FAULT_INJECTION: forcing a failure. [ 352.131659] name failslab, interval 1, probability 0, space 0, times 0 [ 352.142992] CPU: 0 PID: 23554 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180712+ #6 [ 352.151379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 352.160714] Call Trace: [ 352.163289] dump_stack+0x1c9/0x2b4 [ 352.166909] ? dump_stack_print_info.cold.2+0x52/0x52 [ 352.172095] should_fail.cold.4+0xa/0x11 [ 352.176146] ? __kernel_text_address+0xd/0x40 [ 352.180646] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 352.186790] ? __save_stack_trace+0x8d/0xf0 [ 352.191110] ? save_stack+0xa9/0xd0 [ 352.194723] ? save_stack+0x43/0xd0 [ 352.198333] ? kasan_kmalloc+0xc4/0xe0 [ 352.202212] ? kasan_slab_alloc+0x12/0x20 [ 352.208350] ? kmem_cache_alloc_node+0x144/0x780 [ 352.213106] ? __alloc_skb+0x119/0x790 [ 352.216984] ? inet_netconf_notify_devconf+0xc9/0x220 [ 352.222163] ? __devinet_sysctl_unregister.isra.27+0x87/0xb0 [ 352.227951] ? devinet_sysctl_unregister+0x92/0xf0 [ 352.232878] ? inetdev_event+0xa8f/0x1370 [ 352.237012] ? notifier_call_chain+0x180/0x390 [ 352.241577] ? raw_notifier_call_chain+0x2d/0x40 [ 352.246333] ? call_netdevice_notifiers_info+0x3f/0x90 [ 352.251601] ? rollback_registered_many+0x92a/0xec0 [ 352.256615] ? unregister_netdevice_queue+0x32f/0x660 [ 352.261813] ? lock_acquire+0x1e4/0x540 [ 352.265866] ? fs_reclaim_acquire+0x20/0x20 [ 352.270177] ? lock_downgrade+0x8f0/0x8f0 [ 352.274312] ? check_same_owner+0x340/0x340 [ 352.278619] ? lock_downgrade+0x8f0/0x8f0 [ 352.282757] ? unwind_get_return_address+0x61/0xa0 [ 352.287671] ? rcu_note_context_switch+0x730/0x730 [ 352.292587] __should_failslab+0x124/0x180 [ 352.296895] should_failslab+0x9/0x14 [ 352.300693] kmem_cache_alloc_node_trace+0x26f/0x770 [ 352.305784] ? kasan_kmalloc+0xc4/0xe0 [ 352.309652] __kmalloc_node_track_caller+0x33/0x70 [ 352.314569] __kmalloc_reserve.isra.41+0x3a/0xe0 [ 352.319317] __alloc_skb+0x155/0x790 [ 352.323016] ? skb_scrub_packet+0x490/0x490 [ 352.327323] ? trace_hardirqs_off+0xd/0x10 [ 352.331544] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 352.336632] ? debug_check_no_obj_freed+0x30b/0x595 [ 352.341635] ? trace_hardirqs_off+0xd/0x10 [ 352.345863] ? quarantine_put+0x10d/0x1b0 [ 352.349994] inet_netconf_notify_devconf+0xc9/0x220 [ 352.354993] __devinet_sysctl_unregister.isra.27+0x87/0xb0 [ 352.360600] devinet_sysctl_unregister+0x92/0xf0 [ 352.365338] inetdev_event+0xa8f/0x1370 [ 352.369296] ? wireless_nlevent_flush+0xd9/0x100 [ 352.374050] ? lock_downgrade+0x8f0/0x8f0 [ 352.378184] ? wpan_phy_register+0x270/0x270 [ 352.382584] ? do_raw_spin_unlock+0xa7/0x2f0 [ 352.386977] ? inetdev_init+0x590/0x590 [ 352.390937] ? kasan_check_write+0x14/0x20 [ 352.395174] ? do_raw_spin_lock+0xc1/0x200 [ 352.399398] ? netlbl_unlhsh_netdev_handler+0xbc/0x3d0 [ 352.404662] ? netlbl_unlhsh_free_iface+0x700/0x700 [ 352.409664] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 352.414859] notifier_call_chain+0x180/0x390 [ 352.419265] ? notifier_call_chain+0x180/0x390 [ 352.423834] ? unregister_die_notifier+0x20/0x20 [ 352.428588] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 352.434120] ? rtnl_is_locked+0xb5/0xf0 [ 352.438165] ? rtnl_trylock+0x20/0x20 [ 352.441947] raw_notifier_call_chain+0x2d/0x40 [ 352.446519] call_netdevice_notifiers_info+0x3f/0x90 [ 352.451617] rollback_registered_many+0x92a/0xec0 [ 352.456442] ? dev_xdp_uninstall+0x370/0x370 [ 352.460844] ? retint_kernel+0x10/0x10 [ 352.464720] ? lock_acquire+0x1e4/0x540 [ 352.468677] ? skb_dequeue+0x12f/0x180 [ 352.472545] rollback_registered+0x1e9/0x420 [ 352.476937] ? rollback_registered_many+0xec0/0xec0 [ 352.481936] ? lock_downgrade+0x8f0/0x8f0 [ 352.486066] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 352.491585] ? rtnl_is_locked+0xb5/0xf0 [ 352.495547] ? rtnl_trylock+0x20/0x20 [ 352.499335] ? trace_hardirqs_on+0xd/0x10 [ 352.503478] ? queue_delayed_work_on+0x130/0x1f0 [ 352.508220] unregister_netdevice_queue+0x32f/0x660 [ 352.513223] ? rollback_registered+0x420/0x420 [ 352.517791] ? linkwatch_schedule_work+0x180/0x180 [ 352.522707] ? tun_show_owner+0x170/0x170 [ 352.526841] ? do_raw_spin_unlock+0xa7/0x2f0 [ 352.531235] ? netif_set_real_num_tx_queues+0x10d/0x6f0 [ 352.536686] ? __tun_detach+0x6d4/0x15e0 [ 352.540728] __tun_detach+0x11d1/0x15e0 [ 352.544703] ? tun_attach+0x1780/0x1780 [ 352.548657] ? locks_remove_posix+0x464/0x860 [ 352.553163] ? do_lock_file_wait.part.30+0x260/0x260 [ 352.558250] ? pid_task+0x115/0x200 [ 352.561857] ? find_vpid+0xf0/0xf0 [ 352.565384] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 352.570219] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 352.575741] ? locks_remove_file+0x3df/0x590 [ 352.580309] ? fcntl_setlk+0x1010/0x1010 [ 352.584365] ? fsnotify_first_mark+0x350/0x350 [ 352.588932] ? __fsnotify_parent+0xcc/0x420 [ 352.593243] ? fsnotify+0x14e0/0x14e0 [ 352.597030] ? __tun_detach+0x15e0/0x15e0 [ 352.601171] ? __tun_detach+0x15e0/0x15e0 [ 352.605298] tun_chr_close+0xe3/0x180 [ 352.609098] __fput+0x35d/0x930 [ 352.612359] ? fput+0x1a0/0x1a0 [ 352.615626] ? kasan_check_write+0x14/0x20 [ 352.619867] ? do_raw_spin_lock+0xc1/0x200 [ 352.624083] ____fput+0x15/0x20 [ 352.627356] task_work_run+0x1ec/0x2a0 [ 352.631227] ? task_work_cancel+0x250/0x250 [ 352.635542] ? copy_fd_bitmaps+0x210/0x210 [ 352.639762] exit_to_usermode_loop+0x318/0x380 [ 352.644336] ? syscall_slow_exit_work+0x500/0x500 [ 352.649164] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 352.654693] do_syscall_64+0x6be/0x820 [ 352.658565] ? finish_task_switch+0x1d3/0x870 [ 352.663046] ? syscall_return_slowpath+0x5e0/0x5e0 [ 352.667956] ? syscall_return_slowpath+0x31d/0x5e0 [ 352.673143] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 352.678150] ? prepare_exit_to_usermode+0x291/0x3b0 [ 352.683153] ? perf_trace_sys_enter+0xb10/0xb10 [ 352.687891] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 352.692910] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 352.698129] RIP: 0033:0x455a79 [ 352.701317] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 352.720509] RSP: 002b:00007fc0d2d31c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 352.728503] RAX: 0000000000000000 RBX: 00007fc0d2d326d4 RCX: 0000000000455a79 [ 352.735759] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000015 [ 352.743063] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 352.751188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 03:54:03 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2625cf547048ec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:03 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0xc804}) 03:54:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f0000000280)=""/11, 0x1000002b9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) dup3(r1, r2, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000040)) r3 = syz_open_pts(r0, 0x0) dup2(r2, r3) [ 352.758483] R13: 00000000004eb5d2 R14: 00000000004c8d00 R15: 0000000000000002 03:54:03 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec487054cf252600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:03 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x900}) [ 352.833417] device syz_tun left promiscuous mode [ 352.844938] device syz_tun left promiscuous mode 03:54:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:54:03 executing program 7: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, [], 0x21}, 0x7}}, 0x5, 0xe5}, &(0x7f00000000c0)=0x90) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000003180)=@assoc_value={r1, 0x5}, 0xffffffffffffff72) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0x2, 0x4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2}}}, 0x98) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x80000, 0x0) recvmmsg(r2, &(0x7f0000003080)=[{{&(0x7f00000002c0)=@l2, 0x80, &(0x7f0000001900)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/234, 0xea}, {&(0x7f0000001440)=""/112, 0x70}, {&(0x7f00000014c0)=""/195, 0xc3}, {&(0x7f00000015c0)=""/246, 0xf6}, {&(0x7f00000016c0)=""/130, 0x82}, {&(0x7f0000001780)=""/247, 0xf7}, {&(0x7f0000001880)=""/91, 0x5b}], 0x8, &(0x7f0000001980)=""/190, 0xbe, 0x634}, 0x1bdd}, {{&(0x7f0000001a40)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000001ac0)=""/57, 0x39}, {&(0x7f0000001b00)=""/118, 0x76}, {&(0x7f0000001b80)=""/45, 0x2d}, {&(0x7f0000001bc0)=""/124, 0x7c}, {&(0x7f0000001c40)=""/227, 0xe3}, {&(0x7f0000001d40)=""/200, 0xc8}, {&(0x7f0000001e40)=""/4096, 0x1000}, {&(0x7f0000002e40)=""/230, 0xe6}, {&(0x7f0000002f40)=""/85, 0x55}], 0x9, 0x0, 0x0, 0x3}, 0x81}], 0x2, 0x1, &(0x7f0000003100)={0x77359400}) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f0000000080)) 03:54:03 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x0, 0x200, r3}) close(r2) 03:54:03 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:03 executing program 6 (fault-call:7 fault-nth:3): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:54:03 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x9}) 03:54:03 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 352.973121] device syz_tun entered promiscuous mode 03:54:03 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:03 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x57b5, &(0x7f0000000040)="025cc83da85edda0b1172c0a2a34505d325284faa5cb9e4e40dd32e9648e59746b60a781e2c5c6231e5addcc9a29c0a8851800a8a952b6730b16999a0b25951a80aed8efa7c4d3cf8b34ed4e68204f02bd94b449ae6b36a0fe3bd7c745b924a5e5dd6b51e78d684bda5eb7541a98920a4f5439106868a4fcce7e5fed91ede846c6183f2bde3bdeeb1038d5566e53f904e61cf70000000000000000000000000000") r1 = socket$netlink(0x10, 0x3, 0x0) semget(0x2, 0x0, 0x10) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xeb70, &(0x7f00000001c0)={&(0x7f0000000200)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfffffff0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}, @RTA_PREFSRC={0x8, 0x4, @multicast1=0xe0000001}]}, 0x2c}, 0x1}, 0x0) 03:54:03 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x600}) 03:54:03 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:03 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x0, r3}) close(r2) [ 352.998822] device syz_tun entered promiscuous mode [ 353.008768] device syz_tun left promiscuous mode [ 353.030906] FAULT_INJECTION: forcing a failure. [ 353.030906] name failslab, interval 1, probability 0, space 0, times 0 [ 353.042299] CPU: 0 PID: 23613 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180712+ #6 [ 353.050709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 353.060066] Call Trace: [ 353.062672] dump_stack+0x1c9/0x2b4 [ 353.066314] ? dump_stack_print_info.cold.2+0x52/0x52 [ 353.071522] should_fail.cold.4+0xa/0x11 [ 353.075600] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 353.080731] ? lock_acquire+0x1e4/0x540 [ 353.084711] ? is_bpf_text_address+0xae/0x170 [ 353.089205] ? lock_downgrade+0x8f0/0x8f0 [ 353.093346] ? lock_release+0xa30/0xa30 [ 353.097316] ? kasan_check_read+0x11/0x20 [ 353.101461] ? rcu_is_watching+0x8c/0x150 [ 353.105598] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 353.110256] ? lock_acquire+0x1e4/0x540 [ 353.114216] ? fs_reclaim_acquire+0x20/0x20 [ 353.118530] ? lock_downgrade+0x8f0/0x8f0 [ 353.122663] ? unwind_get_return_address+0x61/0xa0 [ 353.127579] ? check_same_owner+0x340/0x340 [ 353.131896] ? rcu_note_context_switch+0x730/0x730 [ 353.136818] __should_failslab+0x124/0x180 [ 353.141044] should_failslab+0x9/0x14 [ 353.144840] kmem_cache_alloc_node+0x272/0x780 [ 353.149419] ? notifier_call_chain+0x180/0x390 [ 353.154001] ? raw_notifier_call_chain+0x2d/0x40 [ 353.158777] ? call_netdevice_notifiers_info+0x3f/0x90 [ 353.164050] ? rollback_registered_many+0x92a/0xec0 [ 353.169065] ? rollback_registered+0x1e9/0x420 [ 353.173647] ? unregister_netdevice_queue+0x32f/0x660 [ 353.178846] ? __tun_detach+0x11d1/0x15e0 [ 353.182988] ? tun_chr_close+0xe3/0x180 [ 353.186956] __alloc_skb+0x119/0x790 [ 353.190656] ? skb_scrub_packet+0x490/0x490 [ 353.194964] ? trace_hardirqs_off+0xd/0x10 [ 353.199190] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 353.204286] ? debug_check_no_obj_freed+0x30b/0x595 [ 353.209289] ? trace_hardirqs_off+0xd/0x10 [ 353.213509] ? quarantine_put+0x10d/0x1b0 [ 353.217662] inet6_netconf_notify_devconf+0xab/0x1e0 [ 353.222752] __addrconf_sysctl_unregister.isra.58+0xa7/0xe0 [ 353.231488] addrconf_sysctl_unregister+0x91/0xf0 [ 353.236317] addrconf_ifdown+0x1030/0x1670 [ 353.240553] ? inet6_rtm_newaddr+0x1b50/0x1b50 [ 353.245120] ? rcu_note_context_switch+0x730/0x730 [ 353.250041] ? kasan_check_write+0x14/0x20 [ 353.254263] ? tee_netdev_event+0x48/0x350 [ 353.258482] ? nfnl_unlock+0x26/0x30 [ 353.262190] ? mutex_trylock+0x2b0/0x2b0 [ 353.266236] ? lock_downgrade+0x8f0/0x8f0 [ 353.270370] ? lock_downgrade+0x8f0/0x8f0 [ 353.274503] ? lock_downgrade+0x8f0/0x8f0 [ 353.278639] ? cfg80211_leave+0x40/0x40 [ 353.282597] ? tee_netdev_event+0x2a1/0x350 [ 353.286903] ? lock_downgrade+0x8f0/0x8f0 [ 353.291048] ? kasan_check_write+0x14/0x20 [ 353.295274] addrconf_notify+0x6e9/0x27f0 [ 353.299414] ? kasan_check_write+0x14/0x20 [ 353.303655] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 353.308574] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 353.314112] ? inet6_ifinfo_notify+0x150/0x150 [ 353.318688] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 353.324225] ? wait_for_completion+0x8d0/0x8d0 [ 353.328793] ? tls_device_gc_task+0x650/0x650 [ 353.333274] ? refcount_inc_not_zero+0x2f0/0x2f0 [ 353.338020] ? refcount_add_not_zero+0x330/0x330 [ 353.342763] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 353.348962] ? ip6mr_device_event+0x2b3/0x390 [ 353.353449] ? mif6_delete+0xc20/0xc20 [ 353.357328] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 353.362875] ? ip_vs_dst_event+0x25c/0x690 [ 353.367102] ? mutex_unlock+0xd/0x10 [ 353.370803] notifier_call_chain+0x180/0x390 [ 353.375198] ? notifier_call_chain+0x180/0x390 [ 353.379768] ? unregister_die_notifier+0x20/0x20 [ 353.384510] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 353.390037] ? rtnl_is_locked+0xb5/0xf0 [ 353.394001] ? rtnl_trylock+0x20/0x20 [ 353.397790] raw_notifier_call_chain+0x2d/0x40 [ 353.402363] call_netdevice_notifiers_info+0x3f/0x90 [ 353.407452] rollback_registered_many+0x92a/0xec0 [ 353.412282] ? dev_xdp_uninstall+0x370/0x370 [ 353.416677] ? trace_hardirqs_on+0x10/0x10 [ 353.420896] ? trace_hardirqs_on+0x10/0x10 [ 353.425118] ? update_curr+0x4e7/0xc00 [ 353.429003] ? find_get_entries_tag+0x1410/0x1410 [ 353.433835] ? lock_acquire+0x1e4/0x540 [ 353.437797] ? skb_dequeue+0x12f/0x180 [ 353.441671] rollback_registered+0x1e9/0x420 [ 353.446068] ? rollback_registered_many+0xec0/0xec0 [ 353.451067] ? lock_downgrade+0x8f0/0x8f0 [ 353.455204] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 353.460729] ? rtnl_is_locked+0xb5/0xf0 [ 353.464686] ? rtnl_trylock+0x20/0x20 [ 353.468473] ? trace_hardirqs_on+0xd/0x10 [ 353.472607] ? queue_delayed_work_on+0x130/0x1f0 [ 353.477347] unregister_netdevice_queue+0x32f/0x660 [ 353.482350] ? rollback_registered+0x420/0x420 [ 353.486915] ? linkwatch_schedule_work+0x180/0x180 [ 353.491827] ? tun_show_owner+0x170/0x170 [ 353.495971] ? do_raw_spin_unlock+0xa7/0x2f0 [ 353.500370] ? netif_set_real_num_tx_queues+0x10d/0x6f0 [ 353.505716] ? __tun_detach+0x6d4/0x15e0 [ 353.509765] __tun_detach+0x11d1/0x15e0 [ 353.513724] ? tun_attach+0x1780/0x1780 [ 353.517682] ? locks_remove_posix+0x464/0x860 [ 353.522162] ? do_lock_file_wait.part.30+0x260/0x260 [ 353.527250] ? pid_task+0x115/0x200 [ 353.530862] ? find_vpid+0xf0/0xf0 [ 353.534391] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 353.539915] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 353.545434] ? locks_remove_file+0x3df/0x590 [ 353.549829] ? fcntl_setlk+0x1010/0x1010 [ 353.553874] ? fsnotify_first_mark+0x350/0x350 [ 353.558442] ? __fsnotify_parent+0xcc/0x420 [ 353.562750] ? fsnotify+0x14e0/0x14e0 [ 353.566548] ? __tun_detach+0x15e0/0x15e0 [ 353.570678] ? __tun_detach+0x15e0/0x15e0 [ 353.574810] tun_chr_close+0xe3/0x180 [ 353.578604] __fput+0x35d/0x930 [ 353.581888] ? fput+0x1a0/0x1a0 [ 353.585165] ? kasan_check_write+0x14/0x20 [ 353.589825] ? do_raw_spin_lock+0xc1/0x200 [ 353.594052] ____fput+0x15/0x20 [ 353.597317] task_work_run+0x1ec/0x2a0 [ 353.601190] ? task_work_cancel+0x250/0x250 [ 353.605494] ? copy_fd_bitmaps+0x210/0x210 [ 353.610499] exit_to_usermode_loop+0x318/0x380 [ 353.615069] ? syscall_slow_exit_work+0x500/0x500 [ 353.619900] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 353.625425] do_syscall_64+0x6be/0x820 [ 353.629300] ? syscall_slow_exit_work+0x500/0x500 [ 353.634136] ? syscall_return_slowpath+0x5e0/0x5e0 [ 353.639051] ? syscall_return_slowpath+0x31d/0x5e0 [ 353.643972] ? prepare_exit_to_usermode+0x291/0x3b0 [ 353.648989] ? perf_trace_sys_enter+0xb10/0xb10 [ 353.653648] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 353.658479] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 353.663748] RIP: 0033:0x455a79 [ 353.666917] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 353.686103] RSP: 002b:00007fc0d2d31c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 353.693801] RAX: 0000000000000000 RBX: 00007fc0d2d326d4 RCX: 0000000000455a79 03:54:04 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x600000000000000}) [ 353.701065] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000015 [ 353.708320] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 353.715574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 353.722828] R13: 00000000004eb5d2 R14: 00000000004c8d00 R15: 0000000000000003 [ 353.769294] device syz_tun left promiscuous mode [ 353.778410] device syz_tun entered promiscuous mode [ 353.809763] device syz_tun left promiscuous mode 03:54:04 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f0000000280)=""/11, 0x1000002b9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) dup3(r1, r2, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000040)) r3 = syz_open_pts(r0, 0x0) dup2(r2, r3) 03:54:04 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:04 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x82}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x43f, 0x305a00) ioctl$FICLONE(r0, 0x40049409, r0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xffffffffffffffff, 0x2, 0xb3, 0x3, 0xa2b4, 0xc69, 0xfffffffffffffffb, 0x8, 0x100000001, 0x8}) clone(0x0, &(0x7f0000000080), &(0x7f00000002c0), &(0x7f0000000140), &(0x7f0000000200)) shmget(0x2, 0x4000, 0x54001000, &(0x7f0000ffa000/0x4000)=nil) r1 = shmget(0x1, 0x1000, 0x40, &(0x7f0000ffb000/0x1000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000040)=""/63) 03:54:04 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0xf6ffffff00000000}) 03:54:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:54:04 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:54:04 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x0, r3}) close(r2) 03:54:04 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:04 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:04 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x3900}) 03:54:04 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 353.969994] device syz_tun entered promiscuous mode [ 353.978291] device syz_tun entered promiscuous mode [ 354.016689] device syz_tun left promiscuous mode [ 354.026300] device syz_tun left promiscuous mode 03:54:05 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:05 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200}) close(r2) 03:54:05 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0xfffffffe}) 03:54:05 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:05 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x4) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r1) [ 354.151399] device syz_tun entered promiscuous mode [ 354.183957] device syz_tun left promiscuous mode [ 354.198243] device syz_tun entered promiscuous mode [ 354.207442] device syz_tun left promiscuous mode [ 354.243330] device syz_tun entered promiscuous mode [ 354.249786] device syz_tun left promiscuous mode 03:54:05 executing program 4: syz_read_part_table(0x0, 0xaaaaaaaaaaaade6, &(0x7f0000000200)=[{&(0x7f0000000000)="000000000e00000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000020000000000030d00f0043100c90000006400000000043200632020002d010000d306000055aa", 0x60, 0x1a0}]) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x404000, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x0, 0x841) 03:54:05 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x400000, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="b9c70b0000b802000000ba000000000f300f21bcc42175d08cf6d66a0000c4624d93443a00b9980100000f3265f2410f0866470fe07d001d0000000043d9fe66baf80cb85cc87b8fef66bafc0ced", 0x4e}], 0x1, 0x0, &(0x7f00000002c0), 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") pwrite64(r0, &(0x7f0000000240)="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", 0x1000, 0x43) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000001c0)={0x0, 0x7fffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"6ef240fbaeb9e8b61a00"}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x0, 0x0, &(0x7f00000000c0), 0x33e) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:54:05 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x6}) 03:54:05 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:05 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:05 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(0xffffffffffffffff) 03:54:05 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000080)=@raw=[@generic={0x2, 0x7ff, 0x9, 0x200}, @exit={0x95}], &(0x7f00000000c0)='GPL\x00', 0x1, 0x88, &(0x7f0000000100)=""/136, 0x40f00, 0x1, [], 0x0, 0x3}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:54:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:54:05 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x3900000000000000}) 03:54:05 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:05 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 354.917620] device syz_tun entered promiscuous mode [ 354.926240] device syz_tun entered promiscuous mode [ 354.948490] device syz_tun left promiscuous mode 03:54:05 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x1000000}) [ 354.958679] kvm: pic: level sensitive irq not supported [ 354.975839] kvm: pic: level sensitive irq not supported [ 354.982628] kvm: pic: level sensitive irq not supported [ 354.995265] loop4: p1 p3 p4 [ 355.004965] loop4: partition table partially beyond EOD, truncated [ 355.014365] device syz_tun left promiscuous mode 03:54:05 executing program 0 (fault-call:7 fault-nth:0): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) [ 355.025403] kvm: pic: level sensitive irq not supported 03:54:06 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:06 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2625cf541fffe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:06 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) r4 = fcntl$getown(r0, 0x9) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f00000000c0)={0x8, 0x5, 0x5}) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x1, 0x7, 0x7ff, 0x2]}) ptrace$cont(0x20, r4, 0xeb, 0x400) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000180)={0x0, 0xe9, "e0b625df3e27d1ffc9411897ffebfe8c3296dec604f694623d9ee0054af87aaa80ac91c778a2b4fce64891b7d95d495abe8996bf4501c5cb8603472a8c814d06f1e1207ef5b3126aee606d9a1afee0281f89e76445dbd427eafb0e04db3eda42e705d31129701dc4a72d9a7f9c206925e601705087a89240747167d143e283309ce62eb6154f2d8e78e9661dde16092d7633ac61f55e311f9abc691a6eadf10867deb5f7230855fbc81cc2329aef640c2ed64ffc5b8c056a9f1c023c4d22b00c06383f6420821e683a1d132023d3ff852c936d603fb8ab9dc2a8b3b16c2ee25c92f09d386441ad14d0"}, &(0x7f00000002c0)=0xf1) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000300)={r5, 0x4}, &(0x7f0000000340)=0x8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r6, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r3) [ 355.025819] kvm: pic: level sensitive irq not supported [ 355.063317] kvm: pic: level sensitive irq not supported [ 355.067923] device syz_tun entered promiscuous mode [ 355.088633] loop4: p1 start 1 is beyond EOD, truncated [ 355.094120] loop4: p3 start 201 is beyond EOD, truncated [ 355.094534] kvm: pic: level sensitive irq not supported [ 355.099621] loop4: p4 start 301 is beyond EOD, truncated [ 355.123727] FAULT_INJECTION: forcing a failure. [ 355.123727] name failslab, interval 1, probability 0, space 0, times 0 [ 355.135163] CPU: 0 PID: 23763 Comm: syz-executor0 Not tainted 4.18.0-rc4-next-20180712+ #6 [ 355.143581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 355.147359] kvm: pic: level sensitive irq not supported [ 355.153378] Call Trace: [ 355.153408] dump_stack+0x1c9/0x2b4 [ 355.153423] ? dump_stack_print_info.cold.2+0x52/0x52 [ 355.153441] ? unlock_page_memcg+0x2c/0x40 [ 355.153462] should_fail.cold.4+0xa/0x11 [ 355.153479] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 355.153501] ? kasan_check_write+0x14/0x20 [ 355.160130] kvm: pic: level sensitive irq not supported [ 355.161449] ? __init_rwsem+0x1cc/0x2a0 [ 355.161470] ? rtnl_lock+0x17/0x20 [ 355.161490] ? lock_acquire+0x1e4/0x540 [ 355.169585] kvm: pic: level sensitive irq not supported [ 355.170515] ? lock_release+0xa30/0xa30 [ 355.170532] ? check_same_owner+0x340/0x340 [ 355.170551] ? lock_acquire+0x1e4/0x540 [ 355.170574] ? fs_reclaim_acquire+0x20/0x20 [ 355.228736] ? lock_downgrade+0x8f0/0x8f0 [ 355.232876] ? check_same_owner+0x340/0x340 [ 355.237185] ? rcu_note_context_switch+0x730/0x730 [ 355.242106] __should_failslab+0x124/0x180 [ 355.246332] should_failslab+0x9/0x14 [ 355.250122] kmem_cache_alloc_trace+0x2cb/0x780 [ 355.254797] ? __dev_get_by_index+0x1c0/0x1c0 [ 355.259282] fib6_info_alloc+0xc3/0x290 [ 355.263246] ? fib6_update_sernum+0x150/0x150 [ 355.267735] ? find_match+0xec0/0xec0 [ 355.271529] ip6_route_info_create+0x7aa/0x2c30 [ 355.276220] ? ip6_nh_lookup_table.isra.78+0x480/0x480 [ 355.281492] ? __dev_get_by_index+0x1c0/0x1c0 [ 355.285990] ip6_route_add+0x23/0xc0 [ 355.289706] ipv6_route_ioctl+0x5a5/0x760 [ 355.293855] ? rt6_purge_dflt_routers+0xb00/0xb00 [ 355.298698] ? _parse_integer+0x13b/0x190 [ 355.302852] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 355.308036] inet6_ioctl+0x100/0x1f0 [ 355.311916] sock_do_ioctl+0xe4/0x3e0 [ 355.315700] ? __fget+0x4ac/0x740 [ 355.319161] ? compat_ifr_data_ioctl+0x170/0x170 [ 355.323913] ? lock_release+0xa30/0xa30 [ 355.327879] ? pid_task+0x115/0x200 [ 355.331505] ? find_vpid+0xf0/0xf0 [ 355.335040] ? __f_unlock_pos+0x19/0x20 [ 355.339005] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 355.344946] sock_ioctl+0x30d/0x680 [ 355.348568] ? dlci_ioctl_set+0x40/0x40 [ 355.352526] ? ksys_dup3+0x690/0x690 [ 355.356233] ? kasan_check_write+0x14/0x20 [ 355.360455] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 355.365377] ? fsnotify+0xbac/0x14e0 [ 355.369085] ? vfs_write+0x2f3/0x560 [ 355.372787] ? dlci_ioctl_set+0x40/0x40 [ 355.376750] do_vfs_ioctl+0x1de/0x1720 [ 355.380627] ? fsnotify_first_mark+0x350/0x350 [ 355.385199] ? __fsnotify_parent+0xcc/0x420 [ 355.389521] ? ioctl_preallocate+0x300/0x300 [ 355.393915] ? __fget_light+0x2f7/0x440 [ 355.397873] ? fget_raw+0x20/0x20 [ 355.401317] ? __sb_end_write+0xac/0xe0 [ 355.405278] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 355.410805] ? fput+0x130/0x1a0 [ 355.414075] ? ksys_write+0x1ae/0x260 [ 355.417862] ? security_file_ioctl+0x94/0xc0 [ 355.422260] ksys_ioctl+0xa9/0xd0 [ 355.425860] __x64_sys_ioctl+0x73/0xb0 [ 355.429734] do_syscall_64+0x1b9/0x820 [ 355.433605] ? finish_task_switch+0x1d3/0x870 [ 355.438092] ? syscall_return_slowpath+0x5e0/0x5e0 [ 355.443236] ? syscall_return_slowpath+0x31d/0x5e0 [ 355.448240] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 355.453255] ? prepare_exit_to_usermode+0x291/0x3b0 [ 355.458255] ? perf_trace_sys_enter+0xb10/0xb10 [ 355.463000] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 355.467836] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 355.473018] RIP: 0033:0x455a79 [ 355.476188] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 355.495359] RSP: 002b:00007f9cb144dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 355.503056] RAX: ffffffffffffffda RBX: 00007f9cb144e6d4 RCX: 0000000000455a79 [ 355.510400] RDX: 0000000020000080 RSI: 000000000000890b RDI: 0000000000000013 [ 355.517675] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 355.524956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 355.532236] R13: 00000000004bfa0a R14: 00000000004cf288 R15: 0000000000000000 [ 355.548695] device syz_tun entered promiscuous mode [ 355.598916] device syz_tun left promiscuous mode [ 355.608394] loop4: p1 p3 p4 [ 355.611507] loop4: partition table partially beyond EOD, truncated [ 355.618619] device syz_tun left promiscuous mode [ 355.632227] loop4: p1 start 1 is beyond EOD, truncated [ 355.637611] loop4: p3 start 201 is beyond EOD, truncated [ 355.643106] loop4: p4 start 301 is beyond EOD, truncated 03:54:06 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4002, 0x0) fallocate(r0, 0x8, 0x0, 0x7ffffffffffffffd) ioctl(r0, 0x8001, &(0x7f0000000000)="d114a930b157d36065754129f833e55345cd47f6736c3a6bb8af17e104c3e13d0f2181324f0c5a4d92c5665ec7652833707e0ab785fcb3e2b519f56028703c59386bd443b98bc0199b277d1c9f02e570047467d20418b73d0b4c73855baa1efb7132528a32ffce1908703f8c658e415b9602017130ed81093b92db39f77bb7ff322ea496bc650f3e") 03:54:06 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x300000000000000}) 03:54:06 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec487054cf252600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:06 executing program 0 (fault-call:7 fault-nth:1): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:54:06 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) getsockname$packet(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000140)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', r3}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x4000, 0x0) 03:54:06 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x4000, 0x10) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000000c0)={0x6, 0x2, 0x5, 0x400, 0x3ff, 0x400, 0x3, 0x1000, 0x7, 0x2562b4bb, 0x4, 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x40bc5311, &(0x7f0000000000)) 03:54:06 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:06 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:54:06 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0xfcffffff00000000}) [ 355.732966] device syz_tun entered promiscuous mode [ 355.739682] device syz_tun entered promiscuous mode 03:54:06 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:06 executing program 7: r0 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x1, 0x212000) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)={@dev={0xac, 0x14, 0x14, 0x11}, @broadcast=0xffffffff, 0x0, 0x6, [@multicast1=0xe0000001, @loopback=0x7f000001, @multicast1=0xe0000001, @loopback=0x7f000001, @multicast2=0xe0000002, @dev={0xac, 0x14, 0x14, 0xc}]}, 0x28) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x100, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x14, &(0x7f0000000340)={@loopback, 0x0}, &(0x7f0000000380)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'ip_vti0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000a00)={0x0, @remote, @remote}, &(0x7f0000000a40)=0xc) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000ac0)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000e00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000b00)={0x288, r2, 0x124, 0x70bd2c, 0x25dfdbfe, {0x3}, [{{0x8, 0x1, r3}, {0x26c, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x415}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x40}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4}}, {0x8, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r8}}, {0x8, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r9}}}]}}]}, 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r10 = epoll_create(0x20) fcntl$notify(r10, 0x0, 0x284) pselect6(0x2e7, &(0x7f0000f33fc0), &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00000000c0), 0x8}) 03:54:06 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) execve(&(0x7f0000000040)='./file1\x00', &(0x7f0000000280)=[&(0x7f0000000080)='\x00', &(0x7f00000000c0)='ext3\x00', &(0x7f0000000180)='md5sum{bdevppp0\x00', &(0x7f00000001c0)='ext3\x00', &(0x7f0000000200)='ext3\x00', &(0x7f0000000240)='mime_typecpusetcgroupnodeveth1keyring:\x00'], &(0x7f0000000480)=[&(0x7f00000002c0)='selfvmnet0keyring}[\x00', &(0x7f0000000300)='ext3\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='ext3\x00', &(0x7f00000003c0)='em0\x00', &(0x7f0000000400)='ext3\x00', &(0x7f0000000440)='ext3\x00']) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000004c0)='eql\x00', 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f00000000c0)=ANY=[]) ioctl$KVM_GET_REG_LIST(r0, 0x400452c8, &(0x7f0000000140)={0x362}) getsockopt$bt_hci(r0, 0x0, 0x0, &(0x7f0000000500)=""/201, &(0x7f0000000600)=0xc9) r1 = shmget$private(0x0, 0x3000, 0x78000a63, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000640)=""/241) [ 355.779856] device syz_tun left promiscuous mode [ 355.786810] device syz_tun left promiscuous mode 03:54:06 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) r4 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x0, 0x42302) getdents(r4, &(0x7f00000000c0)=""/150, 0x96) 03:54:06 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:54:06 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}) [ 355.865454] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 03:54:06 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:06 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:06 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000196fe4)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000327f68)=ANY=[@ANYBLOB="0202000211000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000030008000200000002000000e000000200cfb000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000ff0000000000000000"], 0x88}, 0x1}, 0x0) [ 355.913199] device syz_tun entered promiscuous mode 03:54:06 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x40000000}) 03:54:06 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000040)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@local={0xac, 0x14, 0x14, 0xaa}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x4e23, 0x9, 0x4e20, 0x10000, 0xa, 0x80, 0x20, 0x2b, r2, r3}, {0xd0, 0x3, 0x10001, 0x0, 0x5, 0xffffffff, 0x3, 0x9}, {0x1, 0x9, 0xb7, 0xffffffffd3554958}, 0x1, 0x6e6bb1, 0x2, 0x1, 0x1, 0x3}, {{@in6=@dev={0xfe, 0x80, [], 0x19}, 0x4d6, 0x33}, 0x2, @in6=@mcast1={0xff, 0x1, [], 0x1}, 0x3500, 0x2, 0x3, 0x193e, 0x5, 0x4, 0x1ff}}, 0xe8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000000)={r4, 0x0, 0x3, 0x8, 0x14}) prctl$intptr(0x200000002f, 0x1) 03:54:06 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 355.988190] device syz_tun entered promiscuous mode [ 356.019160] device syz_tun left promiscuous mode 03:54:07 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:07 executing program 7: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8000000000000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f000001aff4)) mremap(&(0x7f00000a1000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f000037c000/0x3000)=nil) [ 356.040357] device syz_tun left promiscuous mode 03:54:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:54:07 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0xfcffffff}) 03:54:07 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl(r0, 0x3, &(0x7f0000000200)="490ab761b745ffb61302554fd58dc9a050b56b0b3da431ccb587096d88444e07bff7079a30383044ecbc876662d9186ef55aeb719a8a8cd60bf0b49e74adb338ef6ad724f08e7180") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) r3 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x3f, 0x101000) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffff414, 0xe, 0x75dd, 0x18, "51acfceacab33b359b511e954ef032caab64da41bad06696811cd16c4b012a3f531d504572cbdaf28b4dcc9649bc3bdc17bb8731045ffef982252dd8e566256b", "1de9aeb5647fbee526738f4db28da381d876d59a827e734265f4bd21c09a3c7b", [0x7, 0x8]}) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getgid() getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f00000004c0)=0xe8) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8014000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)=@ipv6_getanyicast={0x14, 0x3e, 0x11, 0x70bd2a, 0x25dfdbfe, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24000041) r9 = getegid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="a00200000000000002000000000000000300000000000000020000000000000003000000000000000100000000000000030000000300000002000000000000008000000000000000090000000000000080ffffffffffffff02000000000000000900000000000000ffffffff0700000001000000050000004b0c0000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="09000000ff010000000000000500000000000000090000000000000001000000020000005d0000000000000006000000000000000000000000000000000000000000000000020000000000000900000000100000050000000000000006000000000000000100000000000000050000000000000000000000000000000400000000000000070000000c000000966700000200000040000000", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="3282000081000000000000000600000000000000ff0100000000000012000000a50000005c5b73797374656d6d643573756d656d315d000000000000000000000000000001000000000000008100000000000000080000000000000006000000060000000200000000000000050000000000000008000000000000007fffffffffffffff0000000000000000ffffff7f000000000500000008000000030000000900000001000100", @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="06000000faffffff000000000500000000000000b00a000000000000080000007f00000073797a5f74756e000100000000000000010000000000000000800000000000000104000000000000ffffffff00000000010000000000000000020000000000000400000000000000010400000000000008000000000000000600000000000000d600000009000000b0c10000ffffffff00000000", @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="d737000053000000000000000600000000000000ff7ffff7ffffffff06000000040000002d776c616e300000"], 0x2a0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r12, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) r13 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x4, 0x200000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r13, 0xc0045540, &(0x7f00000000c0)=0x7) 03:54:07 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x400000801, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000340)=""/158, 0x1000}) getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xffffffffffffffff) r3 = inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0x81000040) inotify_rm_watch(r0, r3) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000002c0)={@dev}, &(0x7f0000000300)=0x14) keyctl$get_persistent(0x16, r1, r2) accept4$packet(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000200)=0x14, 0x800) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000240)={@mcast1={0xff, 0x1, [], 0x1}, 0x37, r4}) writev(r0, &(0x7f0000000100), 0xb) 03:54:07 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:07 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:07 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x8981, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:54:07 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps\x00') mlock2(&(0x7f0000785000/0x1000)=nil, 0x1000, 0x0) ioctl(r2, 0x5, &(0x7f0000000100)="4a8834b6744f9552bf1335673f6381befc8299ce41305a88689b98d3923a3e290afd1d6df8168d7f62955f4e29dc9509be915e9c01be8ffcb006ed35d9c7ec3a1970c4e772c3e93f10f41701635c10ba1bbb2296cc0c64bd61c48dc9932312a68280d6c351f1c466c1c27a61c0459fdd271878102429eb7d0ad58ee9b83f3cf51e060497560d1fa269c55b068610ad228ffc83d5ce2080a9aaa7cc4e999a800bcb8880438b") ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, &(0x7f0000000080)=""/106) sendfile(r3, r4, &(0x7f0000000000), 0x100000080000000) 03:54:07 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x39}) 03:54:07 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:07 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 356.694963] device syz_tun entered promiscuous mode [ 356.706909] device syz_tun entered promiscuous mode 03:54:07 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@sec_ctx={0xc, 0x8, {0x8, 0x8}}]}, 0xc4}, 0x1}, 0x0) [ 356.748834] device syz_tun left promiscuous mode 03:54:07 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0xfffffff6}) 03:54:07 executing program 6: r0 = open(&(0x7f00000005c0)='./file0\x00', 0x0, 0x9) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000006c0), &(0x7f0000000700)=0x8) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @random="b286998f745e"}, 0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e23}}, 0x949b, 0x1f, 0x1, 0xe5a, 0x10000}, &(0x7f0000000140)=0x98) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000540)={@empty, 0x4a450f48, 0x1, 0xff, 0x4, 0x9, 0xfffffffffffffffd, 0xbd}, &(0x7f0000000680)=0x20) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={r5, 0x1, 0xc01e, 0x188c}, &(0x7f00000001c0)=0x10) close(r3) r6 = memfd_create(&(0x7f0000000200)='wlan0/user*\x00', 0x1) syz_open_dev$ndb(&(0x7f0000000580)='/dev/nbd#\x00', 0x0, 0x40) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000740)={r5, 0x0, 0x6, [0xfff, 0xa3, 0x2, 0x7, 0x8, 0x40]}, 0x14) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000000240)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000002c0)={0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000500)={0x94, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='sc%@', @ANYRES64=r7, @ANYBLOB="1063084002000000000000000b6300000b63000006630440010000000d6300000f630c4003000000030000000000000008631040", @ANYRES64=r8, @ANYBLOB="040000000000000001634040000000000000000004000000000000000000000010000000000000000000000018000000000000002800000000000000", @ANYPTR=&(0x7f0000000300)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r3, @ANYBLOB="000000000400000000000000"], @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x000\x00\x00\x00\x00\x00\x00\x008\x00\x00\x00\x00\x00\x00\x00']], 0xa8, 0x0, &(0x7f0000000440)="b4fef36eab7994a6e15edac8fc94505b87dbef2ee80ae31c6cde9b9ed0d8be9bff2754d18188a3ae3f06af89539b690c8dfe82af593f222e935f2fb55bd16cf7e14c839a8906c21833101a1bb209f6c66093878c124edc9a5c0ecb1b099f2a2d3b1a7f63b6067ee680715fca0f6efa89b0ffc3eaed98755fce55f557fefe4de13f4cca4c9488c96f813780f19cde758eedaf538d1ab4b79d09e19b788e6c38e3844644626f93b7c7"}) [ 356.788687] device syz_tun left promiscuous mode 03:54:07 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:07 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0xc0189436, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) [ 356.873143] device syz_tun entered promiscuous mode [ 356.921930] device syz_tun entered promiscuous mode [ 356.945192] device syz_tun left promiscuous mode [ 356.958220] device syz_tun left promiscuous mode 03:54:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:54:08 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x1, 0x2000) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f00000002c0)) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) ptrace(0x11, r2) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0xaaaaaaaaaaaa827, &(0x7f0000000180)=[{&(0x7f0000000080)="fb560101000000020000", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) shutdown(r0, 0x1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x2081, 0x0) 03:54:08 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:08 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"00ac730000000000ec973f820f7c4000", 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'ip6_vti0\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'dummy0\x00', 0x400}) r1 = shmget(0x3, 0x1000, 0x7c00044a, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f0000fff000/0x1000)=nil, 0x0) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x800) 03:54:08 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0xfffffffc}) 03:54:08 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:08 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x0, 0xa, 0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x7, 0x5}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000100)={r3, 0xb6, "b5e60887f4939c066c64c81bb71514879fba8af40a36a209242996febce7035b7cb90e3b3b188fb62b4f3ff9050a7c50884a982dd4b98e64daae7a74e808282f346b2dffdb590ccc377a93284643c56f1bdd3d307fc138ede494c451f568daff044655fac87980f2ae0621057b1f22e2dd7dee9b446af2b4e68b86e83f01b0b28fcc0cfdce8b57f249b478546428f95db96b4f4e1559be6584f21fb5fb536c561e657b19e36398c0ba8602dbbe6f6da69c6d3ec33074"}, &(0x7f00000001c0)=0xbe) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r4) 03:54:08 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x8914, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:54:08 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) 03:54:08 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:08 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 357.549963] device syz_tun entered promiscuous mode [ 357.556665] device syz_tun entered promiscuous mode 03:54:08 executing program 7: r0 = socket$kcm(0x11, 0x3, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x0, r1}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)=@sco={0x1f, {0x608}}, 0x80, &(0x7f0000000000), 0xa2}, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x8000, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000040)=@nfc={0x27, 0x7}, 0x80, &(0x7f0000000000), 0x307}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) [ 357.603197] FAT-fs (loop4): bogus number of reserved sectors [ 357.609227] FAT-fs (loop4): Can't find a valid FAT filesystem 03:54:08 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:08 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x2}) 03:54:08 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 357.662315] device syz_tun left promiscuous mode 03:54:08 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x208, 0x3e5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x200, 0x400000) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000021567aebff40c7330008004500001c0000000000009078ac2314aaac14142b0000000000089078ef2bdd808ab46c9a23a26eea7befeeb3f5129433ee5cfddbb69bac3bcb450a903005494311d8926d795d621ccad09b87"], &(0x7f0000000040)={0x0, 0x0, [0x0, 0x8000, 0xf2d]}) [ 357.768213] device syz_tun left promiscuous mode 03:54:09 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:54:09 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x2) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000000388b87dd4d02a8db1e70e3357f44000000"]) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r3) 03:54:09 executing program 4: r0 = socket(0x1e, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @dev, @broadcast}, &(0x7f0000000300)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000440)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@dev={0xfe, 0x80, [], 0x15}, @in6=@dev={0xfe, 0x80, [], 0x1f}, 0x4e22, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x20, 0x6, r1, r2}, {0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0xe01, 0x92f}, {0x4, 0x3, 0x10000, 0x1}, 0x32e6, 0x0, 0x3, 0x1, 0x1, 0x2}, {{@in=@rand_addr=0x9, 0x4d6, 0x32}, 0xa, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x34ff, 0x2, 0x3, 0x9a, 0x4, 0x800, 0x1}}, 0xe8) recvmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/142, 0x8e}], 0x1, &(0x7f0000000280)=""/79, 0x4f}, 0x160) syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') 03:54:09 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0xb9, "3d96580c83a515f4f302209c7c269511b68ea4c766b9d61ab3f12e0d00e4770d568e868522c4eb29b90ff944dfae90782a0bd7cc51d4bf17e8df95db0738d73aca6cbc19b77ec331d4390511d963d622cf094cf473869956e7bcd7a628d22530fd508e7d8d73b53323cb695304b7ec16651d13913fd0c461dd845351681dae6ef27c18f3578c71d92bb533b9f4a8502511bd48398ae859095f010e292b60bcd0b783abfc5e2efc16c6a1d3de96631adf95b4bb9ee59bff62db"}, &(0x7f0000000100)=0xc1) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000140)={r3, @in6={{0xa, 0x4e21, 0x80, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0xb}}, 0x3f}}}, 0x84) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendmmsg$alg(r1, &(0x7f0000002580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)="578a352e7556b1b55a57eb4a7722e020e8b2b1d87c872f46c58617f10f36beee", 0x20}], 0x1, &(0x7f0000000340)}], 0x1, 0x0) 03:54:09 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x5451, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:54:09 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:09 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:09 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x1000000000000}) 03:54:09 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:09 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000}) 03:54:09 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') bind$vsock_dgram(r0, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000580)='fuse\x00', 0x7a00, &(0x7f00000001c0)=ANY=[]) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuse\x00', 0x8020, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB]) 03:54:09 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 358.420407] device syz_tun entered promiscuous mode [ 358.425688] device syz_tun entered promiscuous mode 03:54:09 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x480400, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000240)=0x8, 0x4) read(r0, &(0x7f00000001c0)=""/50, 0x32) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"766574000000000000000000bd6800", 0x43732e5398416f1b}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={"c1eb00000000000200", 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond_slave_0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f00000003c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in=@dev={0xac, 0x14, 0x14, 0xe}, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x4e24, 0xbe, 0x4e24, 0x0, 0xa, 0x20, 0xa0, 0xc, r3, r4}, {0x7fff000000000, 0x7, 0xe565, 0x9, 0x1, 0x6c13a681, 0x9, 0x80000001}, {0x7fffffff, 0x2, 0x2, 0x4}, 0x8, 0x0, 0x1, 0x0, 0x2, 0x2}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x4d3, 0x32}, 0x2, @in=@multicast2=0xe0000002, 0x0, 0x7, 0x3, 0xffffffffffffffff, 0x3, 0xfffffffffffff78d, 0x10001}}, 0xe8) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffffffffffffffd}]}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"76657400000000000000000400", 0x43732e5398416f1a}) 03:54:09 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet(0x2, 0x8080f, 0xcb8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={0x0, 0xffffffffffffffe1}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000100)={r3, @in6={{0xa, 0x4e20, 0x3, @empty, 0x8001}}, 0x0, 0xfffffffffffffff7, 0x400, 0x0, 0x41}, &(0x7f00000001c0)=0x98) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0xc) kexec_load(0x0, 0x6, &(0x7f0000000680)=[{&(0x7f00000002c0)="34f319fd3592f4cd88a3d3667300fd3579af1e6173d90cc2fed934c222ad59a93cc18ff6307ca3a48593c9653cb4625f3e93a2771e2003310d11a73c279800bbf39224602e4883e071feccb126f15c242fbcb1e1beab3d435e5b4192a45f39b08e7a41d0664602af388fbc69e4bec8a595ec744795e1670d7dece5d96c5c1437a3bd02b39d57fc159905107da87a8a2647b1f80cf3dd042c769dfd15fac8e5386aa53f0d2a3700ce8a254f3852b4162195b2139dfe13", 0xb6, 0xcfe1, 0x6}, {&(0x7f0000000200)="b3ab2a16e2a5e0ae58a133e49bc5df0113ca1ccda42863ab44b4a6c5d4aa5c", 0x1f, 0x1f, 0x2}, {&(0x7f0000000380)="33a78083f405603421e704a216337933bc48de0ad98451e88a0c63fdf086ef101ecabb93d3882a9d2b7091c7fdfd71bde438d52cd870af152551b40483011cb264268c4ad98f5e505d32e96d78e0b19d6a886dc80da51efb5d3dd94821d04fdf438162ad029d5ec744185ee3607678e7c5fe2ec1f736b874b6c3500a47b3aadb58d37057bfbf018b6ca2ed7547efcdfdc956487c415492aff36570369951c1c03d3001766e02ec6c55d4ff8a029c5d75de929dd05e880dc067c437578318d68654a51141ad4bed687476136453fe850885d7d696f53bd4b8acc5c84ef41c2cb786804d", 0xe3, 0x2, 0x92e0}, {&(0x7f0000000480)="e743a0fe72f6ff9b11558852c223d683f0d12d38a758559e164a56de0966da962a4efa55e7f2781893711b907a18119afcbd2e48c64ff0102ec3851d5e44d028c766cf45ddefb80470deb6f5c7be9eb5e6bb955f99fdd2d1af40363f413b9e686f66c8c0bc9debf46cb5a54525a807c5bf7ae992019c8e58eeca981c7ad9061337", 0x81, 0x9fc2}, {&(0x7f0000000540)="61751d9034d1437a7290f8122df40d53171a6266873b62a610ff6b53b1fc522d3c5df8bf9b6257c4bd050cac5e31527db3cf5461a5b786ccde53a0b1b1f4f982a49b437e8e0ac5501ec305cafce2518614cee7e1a7f44d9da103327c4911c62a9e724c1d2bd7a3e23599aaa1ba5031635a4482017a853fc1574dd27d9393c406c533e05094db772376380e6b831ba75c402830de5870a726e0c46683a9921f876f483eecf8681cd16e29c44a2f", 0xad, 0x3ff, 0x101}, {&(0x7f0000000240)="71debe92296beda668e20ff9bc5d", 0xe, 0x4, 0x4}], 0x3e0000) close(r4) [ 358.485569] device syz_tun left promiscuous mode [ 358.496316] device syz_tun left promiscuous mode 03:54:09 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0xc8040000}) 03:54:09 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:10 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:10 executing program 4: r0 = socket(0x80000000010, 0x80000, 0xc) write(r0, &(0x7f0000000340)="1f0000000104fffffd0600000000d9d8f04101000b000100030423ca00aca9", 0x1f) 03:54:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:54:10 executing program 7: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r0, 0x65, 0x0, &(0x7f0000000140)=""/244, &(0x7f0000000240)=0xf4) socket$can_raw(0x1d, 0x3, 0x1) 03:54:10 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0xfbffffff}) 03:54:10 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:54:10 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000080)={0x8f8, 0x5e, 0x5, 0x200, 0x3f}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:54:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x2c100, 0x0) socketpair(0x202, 0x3, 0x80d, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r1, &(0x7f0000000100)=@abs, &(0x7f0000000080)=0x6e, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2a, 0x27}, [], {0x95}}, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x4ae, &(0x7f0000000340)=""/207}, 0x48) 03:54:10 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0xd}) 03:54:10 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2625cf547048ec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:10 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x400000000000000, 0x400) dup3(r2, r1, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f0000006700)=[{{0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000002e00)=""/142, 0x8e}], 0x1, &(0x7f0000002f00)=""/100, 0x64}}], 0x1, 0x0, &(0x7f0000006980)) readv(r2, &(0x7f00000015c0)=[{&(0x7f0000000100)=""/217}, {&(0x7f0000000200)=""/109}, {&(0x7f00000002c0)=""/193}, {&(0x7f00000003c0)=""/231}, {&(0x7f00000004c0)=""/4096}], 0x1ef) 03:54:10 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 359.273434] device syz_tun entered promiscuous mode [ 359.280946] device syz_tun entered promiscuous mode 03:54:10 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0xd9}) 03:54:10 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:10 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={"c1eb00000000000200", 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x480080, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffffffffffffffd}]}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"76657400000000000000000400", 0x43732e5398416f1a}) 03:54:10 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000140)="295ee1311f16f477671070") r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) getsockopt$bt_hci(r1, 0x65, 0x2, &(0x7f0000cbc000)=""/244, &(0x7f0000001000)=0x33b) [ 359.350150] device syz_tun left promiscuous mode [ 359.355753] device syz_tun left promiscuous mode 03:54:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x8936, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:54:10 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='security.ima\x00') ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x1, 0xfffffe9c, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xe}}, 0x10) close(r2) 03:54:10 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:10 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000}) 03:54:10 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 359.494196] device syz_tun entered promiscuous mode [ 359.548657] device syz_tun left promiscuous mode 03:54:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:54:11 executing program 4: r0 = socket$inet6(0xa, 0x807, 0xfffffffffffffffa) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r2 = socket(0xa, 0x1, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000240)=0x0) sched_getparam(r3, &(0x7f00000002c0)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_int(r1, 0x0, 0x20, &(0x7f0000000200), 0x4) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000100)) 03:54:11 executing program 7: r0 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x6, 0x400) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000240)={0x0, 0x9}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000002c0)={r1, 0x7fffffff}, 0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_dccp_int(r2, 0x21, 0x0, &(0x7f00000000c0), &(0x7f0000000180)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r2) ioctl$int_in(r3, 0x5452, &(0x7f00000001c0)=0x2) sendmmsg$unix(r3, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0xffffffffffffffb4, &(0x7f0000000540), 0x1000000000000296, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [r5]}], 0xffffffffffffff2e}], 0x4924924924926c2, 0xfffffffffffffff9) recvmmsg(r4, &(0x7f0000004e40)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x37a, 0x0, &(0x7f00000050c0)={0x77359400}) 03:54:11 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:11 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x900000000000000}) 03:54:11 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000080)={@mcast2={0xff, 0x2, [], 0x1}, r3}, 0x14) close(r2) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x3e, "d8a19cdfe7ad90918359a2fc025269dd2a46d91c9cf329b9822e9ba55e46df3327cd21c9963777b8675bc69d4b58600c1f8eb23927d3a127abbe3d1410af"}, &(0x7f0000000180)=0x62) 03:54:11 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:11 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x8907, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:54:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f00000001c0)={0x3e, {{0x2, 0x4e20, @loopback=0x7f000001}}, {{0x2, 0x4e24}}}, 0x1c8) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r3, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000001040)=ANY=[@ANYBLOB="06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000049bcd40397f5381e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000e3ffffffff"]) r4 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x20000) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vsock\x00', 0x18000, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="4000e4ffffffbaf77edd"], &(0x7f0000000300)=0xe) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000340)={r6, 0x3, 0x8000, 0x5}, &(0x7f0000000380)=0x10) r7 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r7, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r10, 0x4048ae9b, &(0x7f0000000080)={0x70003}) ioctl$KVM_RUN(r10, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000180)="c744240000500000c74424020a000000c7442406000000000f011c240f0134120f20e035020000000f22e0e193ea2c010000e6000f00520ec4e1be5f7cd4a266ba400066b8f4ac66efdeb7eadb7cc866bad10466b8dd0566ef", 0x59}], 0x1, 0x22, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) socketpair(0x0, 0x80000, 0x6, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$FICLONE(r11, 0x40049409, r1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:54:11 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2ff1f54cf252600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:11 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x4c8}) 03:54:11 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 360.133783] device syz_tun entered promiscuous mode [ 360.150330] device syz_tun entered promiscuous mode 03:54:11 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 360.192161] device syz_tun left promiscuous mode [ 360.200187] device syz_tun left promiscuous mode 03:54:11 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x8902, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:54:11 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r2, 0x20000003) r3 = socket$inet6(0xa, 0x6, 0x0) socket$inet6(0xa, 0x41000000000002, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x74, r4, 0x0, 0x70bd2b, 0x25dfdbfd, {0xf}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xdc9e}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x100000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, [], 0xa}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}]}, 0x74}, 0x1}, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)={0xa}, 0x1c) socket$kcm(0x29, 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000180), 0x20000180) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r5 = accept4(r2, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) recvfrom$packet(r5, &(0x7f0000000440)=""/23, 0x17, 0x0, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="7a30f9515d33"}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[]}, 0x1}, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)=@dstopts, 0x8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={@multicast2, @broadcast}, &(0x7f0000000240)=0xc) connect(r5, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r6 = socket$packet(0x11, 0x3, 0x300) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000600)={"00ac73bb00b60000ec973f820f7c4000", 0x80000201d}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000040)={r8, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r6}) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getstats={0x1c, 0x5e, 0x8, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, 0x4}, ["", "", "", ""]}, 0x1c}, 0x1}, 0x20008080) 03:54:11 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) [ 360.322239] device syz_tun entered promiscuous mode [ 360.373509] device syz_tun left promiscuous mode 03:54:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:54:11 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:11 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:11 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x2000000}) 03:54:11 executing program 4: socketpair(0x10, 0x0, 0x80, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000080)={{0x7f, @remote={0xac, 0x14, 0x14, 0xbb}, 0x4e21, 0x3, 'rr\x00', 0x10, 0x2, 0x7a}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x4e23, 0x10003, 0x2, 0x0, 0x2}}, 0x44) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = semget(0x3, 0x3, 0x160) syz_init_net_socket$llc(0x1a, 0x3, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x0, 0xd7}]}) 03:54:11 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x8980, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:54:11 executing program 7: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8001) fallocate(r0, 0x200000000, 0x0, 0x3fffffe) fallocate(r0, 0x20, 0x20000, 0x8000) 03:54:11 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x9000000}) [ 360.993130] device syz_tun entered promiscuous mode 03:54:11 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x800, 0xa) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000140)={'ipddp0\x00', {0x2, 0x4e20}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x82, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) semget$private(0x0, 0x3, 0x280) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f20d86635080000000f22d866b9120400000f320f01dfbaf80c66b8b0f20d8166efbafc0c66b80400000066ef0f20d86635200000000f22d86600ef66b8810000000f23c00f21f8663500000f000f23f8b82d010f00d0f08246f4000f07", 0x5e}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = semget(0x3, 0x6, 0x100) semctl$SEM_STAT(r4, 0x3, 0x12, &(0x7f0000000080)=""/61) 03:54:11 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:11 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0xa3d, &(0x7f0000000040)="025cc83d6de41e60000000000000000000") fstatfs(r0, &(0x7f0000000100)=""/133) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x800000f) fallocate(r1, 0x10, 0x0, 0xfffe) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@rand_addr, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000000080)=0xe8) r3 = getgid() getresuid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)=0x0) r5 = getegid() r6 = geteuid() lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000005c0)={{{@in6=@mcast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast2}}, &(0x7f00000006c0)=0xe8) getresgid(&(0x7f0000000700), &(0x7f0000000740)=0x0, &(0x7f0000000780)) write$FUSE_DIRENTPLUS(r1, &(0x7f00000007c0)={0x380, 0x0, 0x7, [{{0x6, 0x0, 0x0, 0x1000, 0x1ff, 0x4, {0x5, 0x8, 0x100000000, 0x8, 0x80000001, 0xfff, 0x7fff, 0x3ff, 0xffffffff, 0x0, 0x4, r2, r3, 0x4}}, {0x1, 0x22, 0x14, 0xc0, 'vboxnet0-lolo^cgroup'}}, {{0x1, 0x2, 0x200, 0xe347, 0x8, 0x43, {0x0, 0xb0, 0x100000000, 0x4, 0x7, 0x0, 0x100000001, 0x9, 0x1, 0x4, 0x0, r4, r5, 0x9, 0xe2f}}, {0x5, 0x7, 0x10, 0xfffffffffffffaa9, '&\'$vboxnet0ppp1/'}}, {{0x5, 0x2, 0x0, 0x8001, 0x9, 0x9, {0x5, 0x4d60000, 0x3, 0x9, 0x8, 0x10001, 0xffffffff, 0x1, 0xa1be257, 0x5, 0x5, r6, r7, 0x5, 0x7}}, {0x2, 0x0, 0xa, 0x0, '+\'eth1$em1'}}, {{0x1, 0x2, 0x600, 0x9, 0x3, 0x4, {0x2, 0x6, 0x6, 0x8, 0xb1ce, 0x2, 0x80, 0x4, 0x6, 0x80000001, 0x0, r8, r9, 0x4e, 0x7}}, {0x4, 0x0, 0x10, 0xfffffffffffff44d, '&}/ppp1security#'}}, {{0x5, 0x1, 0x6, 0x4000000000000, 0x7, 0x1e4b, {0x3, 0xb82, 0x8001, 0xc0, 0x6, 0x6, 0x2, 0x400, 0x101, 0x4, 0x2, r10, r11, 0x0, 0x5}}, {0x6, 0x27, 0x30, 0x9, 'ppp0selinuxposix_acl_accessppp1.posix_acl_access'}}]}, 0x380) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000000)=0x6, 0x4) 03:54:12 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) 03:54:12 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 361.106473] device syz_tun entered promiscuous mode [ 361.117164] device syz_tun left promiscuous mode 03:54:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'tunl0\x00', 0x802}) 03:54:12 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec487054cf252600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 361.252117] device syz_tun left promiscuous mode [ 361.303726] device syz_tun entered promiscuous mode [ 361.381110] device syz_tun left promiscuous mode 03:54:12 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0xc804000000000000}) 03:54:12 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x84001) ioctl$TIOCCBRK(r0, 0x5428) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(0xffffffffffffffff, r1, 0x8, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @ipv4={[], [0xff, 0xff], @rand_addr=0x40}, 0x7}, 0x1c) r2 = fcntl$getown(r1, 0x9) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000140)=0x6, 0x4) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000240)) syz_open_procfs$namespace(r2, &(0x7f0000000100)='ns/cgroup\x00') write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9) 03:54:12 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x2, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:54:12 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x80400, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000040)={0x100000000, 0xf2c, 0x7f11}) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x4) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @empty, 0x1}, {0xa, 0x4e22, 0x1000, @mcast1={0xff, 0x1, [], 0x1}, 0x7d}, 0x3, [0xfffffffffffffe00, 0x9, 0xc, 0x7a1, 0x40020, 0xffffffffffffffff, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @local={0xfe, 0x80, [], 0xaa}, 0x281}, {0xa, 0x4e23, 0x82d, @mcast1={0xff, 0x1, [], 0x1}, 0x7}, 0x7, [0x1, 0x7d, 0xbc6, 0x4, 0x9, 0x1, 0x4, 0xffffffffffffffff]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x3) 03:54:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:54:12 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:12 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:54:12 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0xfeffffff}) 03:54:12 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:12 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 361.866456] device syz_tun entered promiscuous mode 03:54:12 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000040)="0faebc680036adbaf80c66b82683a78966efbafc0ced0f080f00d366b9ae0a00000f32670fe278050f0667362b8100400000660f54eb", 0x36}], 0x1, 0x80000037, &(0x7f0000000080), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_RUN(r2, 0xae80, 0x0) socket(0x1, 0x10400000006, 0x2) [ 361.887422] device syz_tun entered promiscuous mode 03:54:12 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f00000000c0)="2446134ad6f3668a383af59de9076e98f7e6fdd90ff46df48d274e01f8b2d9b7fdc2894c28e7dd1f0a770597f1918cfb57ee871b08a021f95d8b4a1476b2367e6f8b4ff6d98d298e5fd85b83cf00365abec2459e13c1c560cde6cdbfb4d8a74c12d366c1825e5d583e7d562d977e721c55d00ea3f9116d24611e6bc03fe557592a1f5066dde010ed94438fbd4e9b2a2f095d0da67bd41e549495925aa5197538d8c49d258580822e17", 0xa9) r1 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x8000005, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$FUSE_WRITE(r0, &(0x7f0000000080)={0x18, 0xffffffffffffffda, 0x3, {0x7fff}}, 0x18) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev={0xac, 0x14, 0x14}}, {0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}) 03:54:12 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x6000000}) 03:54:12 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:12 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 361.926348] device syz_tun left promiscuous mode [ 361.940190] device syz_tun left promiscuous mode 03:54:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bcsf0\x00', 0x0}) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)={0x500, {{0xa, 0x4e21, 0x1, @mcast1={0xff, 0x1, [], 0x1}, 0x1}}, 0x0, 0x3, [{{0xa, 0x4e20, 0x9, @mcast1={0xff, 0x1, [], 0x1}, 0x5}}, {{0xa, 0x4e23, 0x3, @local={0xfe, 0x80, [], 0xaa}, 0x9}}, {{0xa, 0x4e20, 0x4, @loopback={0x0, 0x1}, 0x1}}]}, 0x210) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000002140)={0xffffffffffffffff}) setsockopt$inet_tcp_buf(r4, 0x6, 0x0, &(0x7f0000002180)="6475f4618e18a1889545e9fe737928f7e2946ec3288a278f158d0f7bfaf5147f09444d7e84dbea80cfdd87dbf8dbbb3dbd652755180d1f382fb3a5d2f5809a1896d9c61b0629713af633327f3a3bf190d5ba523223089948dc89dad9da1f0639d5c99261f7fc3386ccae1907517c9dbf5d4184f3e4605fce6b27c3115d664a2fd8c31c32e4335e6fa193e3f17d1382824d2cc4f86b", 0x95) 03:54:12 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x894c, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:54:12 executing program 4: memfd_create(&(0x7f0000000040)='&\x00', 0x1) r0 = socket$inet6(0xa, 0x40000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) r1 = dup2(r0, r0) sendto$inet(r1, &(0x7f0000000080), 0x0, 0xc28a4f1bb7934980, &(0x7f0000000200)={0x2, 0x4e24, @rand_addr=0x81}, 0x10) close(r1) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0x3f, 0x7, 0x5, 0xfffffffffffffffe, 0x8001}) 03:54:13 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}) [ 362.093938] device syz_tun entered promiscuous mode [ 362.148162] device syz_tun left promiscuous mode 03:54:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:54:13 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:13 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:13 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000080)=""/116, &(0x7f0000000100)=0x74) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000140)) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000380)="8a", 0x1}], 0x1) 03:54:13 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0xd900}) 03:54:13 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000005240)={0x0, 0x0}, &(0x7f0000005280)=0xc) syz_mount_image$hfs(&(0x7f0000001180)='hfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000005140), 0x0, &(0x7f00000052c0)={[{@uid={'uid', 0x3d, r1}, 0x2c}]}) 03:54:13 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x8983, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:54:13 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) accept$packet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', r3}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:54:13 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}) 03:54:13 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:13 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:13 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmsg$rds(r0, &(0x7f00001c3000)={&(0x7f0000014000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10, &(0x7f0000004000), 0x0, &(0x7f0000003b80)=ANY=[@ANYBLOB="480000000000000000000000001716df375d2f8c30000000", @ANYPTR=&(0x7f0000001840)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="1200000000000000", @ANYPTR=&(0x7f0000003b00)=ANY=[@ANYPTR=&(0x7f0000002ac0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00@\x00 \x00\x00\x00\x00', @ANYPTR=&(0x7f0000003ac0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB=')\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="020000000000000000000000000000000000000000000000"], 0x48}, 0x0) [ 362.705382] hfs: uid requires an argument [ 362.709667] hfs: unable to parse mount options [ 362.709843] device syz_tun entered promiscuous mode [ 362.723317] device syz_tun entered promiscuous mode [ 362.734356] hfs: uid requires an argument [ 362.738636] hfs: unable to parse mount options 03:54:13 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x3900}) 03:54:13 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x200040, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000100)=ANY=[@ANYBLOB="0800000000000000000000000000000000000000000000000000000000009f72560545c2"]) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000136000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x4, @tid=r2}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000040fe0)={{0x0, r3+10000000}, {0x0, 0x9}}, &(0x7f0000000400)) personality(0x5000007) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000000)) ppoll(&(0x7f0000ae7000), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f000079dff8), 0x8) rt_sigtimedwait(&(0x7f0000000140)={0x5}, 0x0, &(0x7f0000000180)={0x0, 0x989680}, 0x8) [ 362.787318] device syz_tun left promiscuous mode [ 362.798167] device syz_tun left promiscuous mode 03:54:13 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x10002, 0x0) accept$alg(r1, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) finit_module(r2, &(0x7f0000000000)='!)proc\x00', 0x2) bind$alg(r2, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="0a0775b0d5e383be7e2038e9c1b263a3", 0x10) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2000, 0x20) sendmmsg$alg(r3, &(0x7f0000002940)=[{0x0, 0x0, &(0x7f00000014c0), 0x2, &(0x7f0000001500)}], 0x3f42c54, 0x0) 03:54:13 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2625cf547048ec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:54:14 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x1000002, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:54:14 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:14 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:54:14 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) 03:54:14 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:14 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2400, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r2, 0x6, 0x3}, 0x14) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000d55000)={0x10}, 0xc, &(0x7f0000c8d000)={&(0x7f0000bfdfdc)={0x24, 0x3, 0x1, 0x800000001, 0x0, 0x0, {}, [@nested={0x10, 0x2, [@typed={0xc, 0x1, @ipv4=@multicast2=0xe0000002}]}]}, 0x24}, 0x1}, 0x0) 03:54:14 executing program 4: r0 = socket(0x200000000000011, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)=""/221, 0xdd}], 0x1, &(0x7f0000000240)=""/157, 0x9d, 0x84f}, 0x0) bind$packet(r0, &(0x7f00000003c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) sendto(r0, &(0x7f0000000100)="95275dc4878ad30b39749b1939db4942a1feb7fd3e0a068309f10118121394e3e1bf60388261cebae912bec10e411eee1a26", 0x32, 0x0, 0x0, 0x0) 03:54:14 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:14 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0xc804}) 03:54:14 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:14 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080)=0x5e2, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00', 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) socket$inet6(0xa, 0x800, 0x8) [ 363.541247] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. [ 363.556126] device syz_tun entered promiscuous mode 03:54:14 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x1000002, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:54:14 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000}) [ 363.612897] device syz_tun left promiscuous mode 03:54:14 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:14 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2625cf541fffe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 363.658482] device syz_tun entered promiscuous mode [ 363.774174] device syz_tun left promiscuous mode 03:54:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:54:15 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x40049409, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:54:15 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6ffffff00000000}) 03:54:15 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:15 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7fff, 0x40000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000100)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r3}}, 0x18) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f0000000140)) sendmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="240000005e0007031dfffd946f61830020200a0009f00000ff1c85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 03:54:15 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:15 executing program 6: r0 = socket$inet6(0xa, 0xffffffffffff, 0x9) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x4000, 0x0) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000000c0)=""/114) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0xfffffffffffffe7a, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) close(r2) [ 364.362126] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. [ 364.383384] device syz_tun entered promiscuous mode [ 364.415867] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. [ 364.449212] device syz_tun left promiscuous mode 03:54:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x5, 0x0, 0xff7ffffffffffffc}) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000140)={0x80000000000000, 0x3000, 0x5, 0x6, 0xd}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66baf80cb8883ee18aef66bafc0ced3e0f30dcf3de25010000000f070f0f75ed0df2e103360f32b85b6000000f23d80f21f835800000000f23f80f30", 0x3c}], 0x1, 0x0, &(0x7f0000000100)=[@cr4={0x1, 0x2040}], 0x1) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f00000000c0)={0xfffffffffffffffc}) 03:54:15 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}) 03:54:15 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:15 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:15 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0xc0400, 0x0) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000680)="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") r2 = socket$packet(0x11, 0x2, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r3) 03:54:15 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffeffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) membarrier(0x40, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x566d}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x3) 03:54:15 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x8918, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:54:15 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:15 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 364.614539] device syz_tun entered promiscuous mode [ 364.622599] device syz_tun entered promiscuous mode [ 364.680477] device syz_tun left promiscuous mode [ 364.699160] device syz_tun left promiscuous mode 03:54:16 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:54:16 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) 03:54:16 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x200, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x800000007fff) close(r0) 03:54:16 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:16 executing program 4: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0xfffffffffffffffd) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x72) 03:54:16 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x8940, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:54:16 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getpeername$inet6(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f00000000c0)=0x1c) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}}}, 0x20) prctl$setmm(0x23, 0x8, &(0x7f0000ffc000/0x2000)=nil) prctl$setmm(0x23, 0x9, &(0x7f0000ffc000/0x2000)=nil) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f00000002c0)={0x8, 0x120, 0xfa00, {0x2, {0x0, 0x3, "4b862f252833f5b161e2f62f509017d70fd6ef21dc47e5c2bc176b9b3d90b0b0f08aedf51a361f30c95d092dfa5c37ae142beffb4648d805c12d04a671373dffc99629220e6fe0104518bf30f8408bb99cfd316f9a0dd0cce064a70c8625e6c905f1ec570f8cd284c794e0f1335c4c7328cebfac130b38f4e0e4fcde0c249139ad38deacbf4257edd3c6d1ef8dbff96f1b9bb83a55d8ac66269b4ff6ecb6a4f4c1cfdebad8389071fcc788d2213ba338c1d8f4b5cc1522d824dea4f195571ad843b0a52ac56347e5ae9ab68f9f2a96d796d324fbe70efd8d55db4f430a5b7fc1a585bdc45a5bb77c7278b2260ccd0875903803df69d392acb1e151f3361c3bf9", 0xad, 0x5, 0x401, 0x1, 0x2119e9b8, 0x33c4, 0xffffffffffffffff, 0x1}, r4}}, 0x128) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:54:16 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:16 executing program 7: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7, 0x80000) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f00000000c0)={@broadcast, @dev}, &(0x7f0000000100)=0x8) mq_getsetattr(r0, &(0x7f0000000040)={0x400, 0x0, 0x4864c97, 0x8, 0xc5af, 0x4, 0x9, 0x8}, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000ed793afe00000000020082012600010000006400000000012700fd030c00650000006400000000030d0085043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) r1 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0xffffffff, 0x40000) write$P9_RLOCK(r1, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x3}, 0x8) ioctl$KVM_PPC_GET_PVINFO(r0, 0x4080aea1, &(0x7f00000001c0)=""/106) 03:54:16 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:16 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x1, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) creat(&(0x7f0000000a00)='./file0/>ile0\x00', 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x90, 0x4) utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{0x77359400}}) 03:54:16 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 365.202041] device syz_tun entered promiscuous mode [ 365.208976] device syz_tun entered promiscuous mode 03:54:16 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}) [ 365.269164] device syz_tun left promiscuous mode [ 365.277626] device syz_tun left promiscuous mode [ 365.291163] FAT-fs (loop4): bogus number of reserved sectors [ 365.297165] FAT-fs (loop4): Can't find a valid FAT filesystem [ 365.310641] loop7: p1 p2 p3 < > p4 < > 03:54:16 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:16 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x5421, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:54:16 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}) [ 365.314731] loop7: partition table partially beyond EOD, truncated [ 365.329374] loop7: p1 start 1 is beyond EOD, truncated [ 365.334818] loop7: p2 start 101 is beyond EOD, truncated [ 365.340354] loop7: p3 start 201 is beyond EOD, truncated [ 365.346563] loop7: p4 start 301 is beyond EOD, truncated [ 365.392485] FAT-fs (loop4): bogus number of reserved sectors [ 365.398436] FAT-fs (loop4): Can't find a valid FAT filesystem [ 365.409199] device syz_tun entered promiscuous mode [ 365.469323] device syz_tun left promiscuous mode [ 365.477917] loop7: p1 p2 p3 < > p4 < > [ 365.481953] loop7: partition table partially beyond EOD, truncated [ 365.489276] loop7: p1 start 1 is beyond EOD, truncated [ 365.494627] loop7: p2 start 101 is beyond EOD, truncated [ 365.500114] loop7: p3 start 201 is beyond EOD, truncated [ 365.505593] loop7: p4 start 301 is beyond EOD, truncated 03:54:16 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:54:16 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffb, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000100)="366951becc095415d9e8f484f78af52c25b69f52fcf53dfeb8d7dc162b629ecd2a5be8166af5732b3a2b48679cca649c91cc80d433d1a31904fcec351f693d7dd86c65c8108131a39ba03b74c718c734f67195624a7e97752eba08c9b8bac76ef38c0a0d280b1627a2a83e41340012ec252f6f905609a2e9e10ae7276172a62bd642dec06220e836fbfadcf8eebd338bb91433c6bb4d5efb71243ee58c55ada591e74c515679b5eed3252daacb36c573", 0xb0, 0x2}, {&(0x7f00000002c0)="9103e407191d790b3bc1bbd3074f6bb16f787ba71ce9ac77c08cdadb8ab6951d4f03410d368e8e36c8406c028bbddef76f2a6a416adba5c06c0e752a8bbefdcff1289f548ec0768ef4c2ba02eb308d5a5027a48ad74ad864cf871bd1a6e26e7cf9df02cf022ba42754533653b0fb89aa0a69edb31d25ef3024cbd1d0cd20536abe0a555d3ab747ad107c5bc1c4c15fec6da14b7496fa05ec49a224e5f28aaed986238ff3b0c7464cdf5b14e7a4f2afbda66534dbce1301ad9aab6ad2992f9e61b84e064e67809822d3d9be15bc2f89c5253ea11b5fc0d3", 0xd7, 0xe256}], 0x8000, &(0x7f0000000200)={[{@swidth={'swidth', 0x3d, 0x5}, 0x2c}, {@qnoenforce='qnoenforce', 0x2c}, {@nogrpid='nogrpid', 0x2c}]}) 03:54:16 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:16 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:16 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}) 03:54:16 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x7, &(0x7f0000000500)=[{&(0x7f0000000040)="0182c0dd09fa776f0829c1331df7ee057aa057b0668102c34b7e9545df1aeab4c6a29babf39c5611ad7eb70c111eaf9919f5d14d051beec834d73d6c54120f", 0x36b}, {&(0x7f0000000080)="f7440c25188ea1bc1d19eb7431bb3829a380fc14886c4b04b08a9101c72b76c0a71cd73e917e96bd2d4850c75f5386", 0x2f, 0x9}, {&(0x7f00000001c0)="87c01998af1b8044e08e38ebb42001ff857995e04f0eb53c686a3e54aecae432a8a1aa638852e13d0f50f38a9cb23264005bcf821676d65c59a321964d00271b99f882575be66de52b58df41680361bb868b3f92effa02e07b1133561095c6d7f325132540f164ba5c354918d1bb1e44a1b18d70872c897a572430d998bff326a69013a0008da0e2c805ca707e7ad17da461f69dc02cf8abc48d0903f83d2a18047718f203bb8d690f12a57bebee7a2826eee254ea3070b61520e500145eaf", 0xbf, 0x7fff}, {&(0x7f00000000c0)="3ed2f0c399c0b4080d3edef98326fcfef166183074d0636f4b8f0abba34326ad933d972177b626cebc4200b5354815d4990426d4962717412a28a224ca46308ead8708e9a366335a0d4934d0870295229b1f40", 0x53, 0x2}, {&(0x7f0000000340)="684e004bd4a3aec7311eb55891050f31bfcb132b156bc68dc60ae90c9563a3755195ec54f8f1ec4c4884725095f59e7bca5f830462138764b68a86396ad63e00ebc97ca6e18fd343e4767968561cf443533adcc53fabc955591ff388dbeaa644599001be545368b8d1c200aba0101c573f0bbbded0352a426a12a9b6791e09424a4e3c5197914b8ab1892a363450c2a76d7d40c08e6e55fd253d827237a2", 0x9e, 0xa3}, {&(0x7f0000000280)="b5a9fcb43c9d7fa9bc1d71004797b843722a", 0x12}, {&(0x7f0000000400)="68370a5c67c2277fbfcf6f12a7e4d98d317fac02aaa8bdc60443a418233b01a46301211ba0e90eb87044f8c32aa8d595f83639c1d3645f2660fa8d23d86b9a0b987a9e47df09a6af8ef04e38b0706d862f3f256b1a3648d56aff5ac13654a68d7b7dc37c9dbd1733f10487b205e4d3f5210b0ec234a5bf5140d2d007e7f03ab4263be4f73220e25867f3ef763b5a6bd5c47981a9cbb497cc3cae23ca28333b4e9ce5fd9e65", 0xa5, 0xfffffffffffffffc}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x1, 0x40000000, r0, &(0x7f0000000300)="2e2f66692e65318c00") 03:54:16 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x5452, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:54:16 executing program 7: r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xffffffffffffffff}}}, 0x84) r1 = gettid() ptrace$pokeuser(0x6, r1, 0x8, 0x66ff8f77) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000009f7c)=""/132, 0x84}, {&(0x7f0000012000)=""/252, 0xfc}, {&(0x7f0000012000)=""/155, 0x400000}, {&(0x7f0000009000)=""/11, 0xb}, {&(0x7f0000000000)=""/102, 0x66}], 0x5, 0x0) ioctl(r0, 0xc2604110, &(0x7f0000000000)) sendmsg$inet_sctp(r0, &(0x7f0000000540)={&(0x7f0000000080)=@in={0x2, 0x4e21, @rand_addr=0x2}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000001c0)="bc79f7e2a0da16192eb81a2d1d99f9be53d947bc695917a2c6653bf88e65b33e1c56b884e3b8d9a3500c1232ede554ab2e00183fa60a52061fbac836309097977ab2e3576fabc993951bad423de8dfb4eedd0642de4f65a227d52c387c8fb62a6295640f6a34b2420c4d6397f03f746abb21c91eb24282dde451f354e4fac9dd12c999437fef04dba720f6b59e9b093907", 0x91}, {&(0x7f0000000280)="c10380df7ea7b8bd2ffbe969830a6abcb889bcdf819cc1fad9dbf886a6309ecd69c84c7d9ec936534206dcb366f2ecb67086fcc3e22848dff4a9bdd8c6c9838b49a04d191302854d7a5cb453742ef23f9cc40cc1ee5ef3e7157845571f87b3933e5011dbca7b37e0876cc983ae2d4db89952c4f44c896038830de9103c8335ca7ce37c08badfa6b26453306cb42920523a24f3fc5c053987ca296ae9", 0x9c}, {&(0x7f0000000340)="e4ea35fd0fbdda3fd8be21418d2a263ae53d2cd0c990b39812be30da05eee6ba82869a287af1b60b12f44d599a0a1d52bb87caac2f7d128075d65b93a42f21f80e13d06ff5b3d6cdd7f96a6fa25185fd0dec57969752f3f9945b61498e37bb4a93236c99a1c699dd92be130d17ac0ee3dfeb49ad4bab7148a5975bb6ce0b6f3d679d9e5712c985860edc6e758eccb4c5a9877daa9d1de9a048bf3a1377e8d90ee18313e9a69cefa69df4f7c3ed07691e81eb3fd64fa84c0112d8cefc9589374e69469befff3d081880e75203bc15db39396e695e88344256467262ea931ea245e8", 0xe1}, {&(0x7f0000000440)="ab89ab69b1584082279832d5ed779734e4b67d6789826ff8412e714333fb1927b8d7f2c1cbd1f02daff2ec56d8bb39b912734462892a97f0f115183b18e94d9f6ca9a68b4d96f5d41bb696aa5fb26426753e941f6f263f12e753585ef69977f123c3d24478bb6d64c047e34b78b192f688499904e3e009e650c44e7f86164d9261e99d72adc2cb8bf2e126b26d2dea921863355bb48ad5fcfcedcb9bece922c99912edd24674dd14eb6df86e05a17708d30954d6d3e9a5cdade9f987d68fc739bf2d7a023a939da435dd54fba3a7240203ee82430f9d539292cd270e03bb42eec0b5ce5005bf41d4b8661893a20b21cf57cf81daca1359c24b89", 0xfa}], 0x4, 0x0, 0x0, 0x48000}, 0x1) 03:54:17 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:17 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}) 03:54:17 executing program 7: [ 366.075512] FAT-fs (loop4): Unrecognized mount option "¦ " or missing value [ 366.077056] device syz_tun entered promiscuous mode [ 366.088220] device syz_tun entered promiscuous mode 03:54:17 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 366.120205] FAT-fs (loop4): Unrecognized mount option "¦ " or missing value [ 366.141729] XFS (loop6): sunit and swidth must be specified together 03:54:17 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700)='/dev/vcs\x00', 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000340), &(0x7f00000007c0)=0xfffffffffffffc89) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r2, &(0x7f0000000540)="f174b15455a00fe9874d2d35bfdaf5531233170e0bf1544d6746dbff5f598ba0398a18a59d5b5b50eec8e5054172450f055d9250d8ccde14ccdbc6e60a3f3c7950047a8ebed1912871abacceceaba19722973b835e7457810be27c3ee83b0c47aee3df3ac90a3715f131f8575d1a6bb02d3cbdc4724a69b275e22a69193cca3d98489aa2443271e4d197a122f79f67347028b4b47621fb91073cede62ea1ac17", 0xa0, 0x4000, &(0x7f0000000140)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x7}, &(0x7f00000000c0)=0x8) syz_genetlink_get_family_id$team(&(0x7f0000000300)='team\x00') getsockname$packet(r1, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000001940)=0x14) recvmsg(r2, &(0x7f0000003f80)={&(0x7f0000001980)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000001a00)=""/150, 0x96}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/104, 0x68}, {&(0x7f0000002b40)=""/201, 0xc9}, {&(0x7f0000002c40)=""/173, 0xad}, {&(0x7f0000002d00)=""/248, 0xf8}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000003e00)=""/21, 0x15}], 0x8, &(0x7f0000003ec0)=""/175, 0xaf, 0x28f7}, 0x40) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000004040)={0x0, @empty, @multicast2}, &(0x7f0000004080)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000004180)={'vcan0\x00'}) accept$packet(r1, &(0x7f00000041c0), &(0x7f0000004200)=0x14) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000004240)={@remote, @multicast2}, &(0x7f0000004280)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004380)={'team0\x00'}) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000043c0)={@local}, &(0x7f0000004400)=0x14) clock_gettime(0x0, &(0x7f0000005bc0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000005b40)=[{{&(0x7f0000004480)=@alg, 0x80, &(0x7f0000004940)=[{&(0x7f0000004500)}, {&(0x7f0000004540)=""/233, 0xe9}, {&(0x7f0000004640)=""/206, 0xce}, {&(0x7f0000004780)=""/151, 0x97}, {&(0x7f0000004840)=""/223, 0xdf}], 0x5, &(0x7f00000049c0)=""/101, 0x65}}, {{&(0x7f0000004a40)=@hci, 0x80, &(0x7f0000005ac0)=[{&(0x7f0000004ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000005b00)=""/26, 0x1a, 0x2}, 0xfffffffffffffffb}], 0x2, 0x0, &(0x7f0000005c00)={r3, r4+30000000}) ioctl$sock_ifreq(r1, 0x899b, &(0x7f0000005c40)={'eql\x00', @ifru_addrs=@can={0x1d}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000008500)={'tunl0\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000008900)={{{@in=@local, @in6=@mcast1}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000008a00)=0xe8) accept4$packet(r1, &(0x7f0000008a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000008a80)=0x14, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000008b80)={{{@in6=@remote, @in=@local}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f0000008c80)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000009140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200008}, 0xc, &(0x7f0000009100)={&(0x7f0000000c80)=ANY=[@ANYBLOB="0c040000", @ANYBLOB="3c00020038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000100000008000100", @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e0000000800040001000000080006", @ANYBLOB="080007000000000008000100", @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000007cfaebe60fdcd88d2d58aa3df90400040008000600", @ANYBLOB="3c00010024000100757365725f6c696e6b75700000000000000000000000000000000000000000000800", @ANYBLOB="a40102003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b"], 0x8}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000010) r5 = gettid() dup(r0) syz_open_dev$sndpcmp(&(0x7f0000000400)='/dev/snd/pcmC#D#p\x00', 0x3ff, 0x2002) fcntl$setown(r0, 0x8, r5) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x9, 0x20}, &(0x7f0000000200)=0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0), 0x4) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000640)) fstat(r2, &(0x7f0000000680)) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) eventfd2(0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) 03:54:17 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:17 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) write$P9_RLINK(r0, &(0x7f0000000000)={0x7, 0x47}, 0x7) [ 366.181221] device syz_tun left promiscuous mode 03:54:17 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9}) [ 366.238477] XFS (loop6): sunit and swidth must be specified together [ 366.289788] device syz_tun left promiscuous mode 03:54:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:54:17 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:17 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a1, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:54:17 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:17 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x593}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x90011, r0, 0x0) sync() 03:54:17 executing program 6: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x42002, 0x0) splice(r0, &(0x7f00000002c0), r0, &(0x7f0000000300), 0x1f, 0x8) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0xffffffff, 0x40) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f00000000c0)) ioctl(r1, 0xfffffffffffffbff, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r4) fcntl$setlease(r3, 0x400, 0x1) 03:54:17 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcffffff}) 03:54:17 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700)='/dev/vcs\x00', 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000340), &(0x7f00000007c0)=0xfffffffffffffc89) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r2, &(0x7f0000000540)="f174b15455a00fe9874d2d35bfdaf5531233170e0bf1544d6746dbff5f598ba0398a18a59d5b5b50eec8e5054172450f055d9250d8ccde14ccdbc6e60a3f3c7950047a8ebed1912871abacceceaba19722973b835e7457810be27c3ee83b0c47aee3df3ac90a3715f131f8575d1a6bb02d3cbdc4724a69b275e22a69193cca3d98489aa2443271e4d197a122f79f67347028b4b47621fb91073cede62ea1ac17", 0xa0, 0x4000, &(0x7f0000000140)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x7}, &(0x7f00000000c0)=0x8) syz_genetlink_get_family_id$team(&(0x7f0000000300)='team\x00') getsockname$packet(r1, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000001940)=0x14) recvmsg(r2, &(0x7f0000003f80)={&(0x7f0000001980)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000001a00)=""/150, 0x96}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/104, 0x68}, {&(0x7f0000002b40)=""/201, 0xc9}, {&(0x7f0000002c40)=""/173, 0xad}, {&(0x7f0000002d00)=""/248, 0xf8}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000003e00)=""/21, 0x15}], 0x8, &(0x7f0000003ec0)=""/175, 0xaf, 0x28f7}, 0x40) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000004040)={0x0, @empty, @multicast2}, &(0x7f0000004080)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000004180)={'vcan0\x00'}) accept$packet(r1, &(0x7f00000041c0), &(0x7f0000004200)=0x14) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000004240)={@remote, @multicast2}, &(0x7f0000004280)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004380)={'team0\x00'}) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000043c0)={@local}, &(0x7f0000004400)=0x14) clock_gettime(0x0, &(0x7f0000005bc0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000005b40)=[{{&(0x7f0000004480)=@alg, 0x80, &(0x7f0000004940)=[{&(0x7f0000004500)}, {&(0x7f0000004540)=""/233, 0xe9}, {&(0x7f0000004640)=""/206, 0xce}, {&(0x7f0000004780)=""/151, 0x97}, {&(0x7f0000004840)=""/223, 0xdf}], 0x5, &(0x7f00000049c0)=""/101, 0x65}}, {{&(0x7f0000004a40)=@hci, 0x80, &(0x7f0000005ac0)=[{&(0x7f0000004ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000005b00)=""/26, 0x1a, 0x2}, 0xfffffffffffffffb}], 0x2, 0x0, &(0x7f0000005c00)={r3, r4+30000000}) ioctl$sock_ifreq(r1, 0x899b, &(0x7f0000005c40)={'eql\x00', @ifru_addrs=@can={0x1d}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000008500)={'tunl0\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000008900)={{{@in=@local, @in6=@mcast1}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000008a00)=0xe8) accept4$packet(r1, &(0x7f0000008a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000008a80)=0x14, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000008b80)={{{@in6=@remote, @in=@local}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f0000008c80)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000009140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200008}, 0xc, &(0x7f0000009100)={&(0x7f0000000c80)=ANY=[@ANYBLOB="0c040000", @ANYBLOB="3c00020038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000100000008000100", @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e0000000800040001000000080006", @ANYBLOB="080007000000000008000100", @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000007cfaebe60fdcd88d2d58aa3df90400040008000600", @ANYBLOB="3c00010024000100757365725f6c696e6b75700000000000000000000000000000000000000000000800", @ANYBLOB="a40102003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b"], 0x8}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000010) r5 = gettid() dup(r0) syz_open_dev$sndpcmp(&(0x7f0000000400)='/dev/snd/pcmC#D#p\x00', 0x3ff, 0x2002) fcntl$setown(r0, 0x8, r5) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x9, 0x20}, &(0x7f0000000200)=0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0), 0x4) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000640)) fstat(r2, &(0x7f0000000680)) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) eventfd2(0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) 03:54:17 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000}) [ 366.932619] device syz_tun entered promiscuous mode [ 366.945315] device syz_tun entered promiscuous mode 03:54:17 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:17 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:17 executing program 4: r0 = socket(0x2000000011, 0x802, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f00000000c0)={{0x2}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x0, {0x2, 0x0, @multicast1=0xe0000001}, 'lo\x00'}) [ 367.010193] device syz_tun left promiscuous mode [ 367.022233] device syz_tun left promiscuous mode 03:54:18 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:18 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x5460, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:54:18 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080), &(0x7f0000000400)=0x4) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x315080, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r5, 0x800, 0x70bd29, 0x25dfdbfb, {0x9}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2=0xe0000002}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x13}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000c0}, 0x800) recvfrom$unix(0xffffffffffffffff, &(0x7f00000000c0)=""/144, 0x90, 0x1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) close(r2) 03:54:18 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 367.151390] device syz_tun entered promiscuous mode [ 367.158845] device syz_tun entered promiscuous mode [ 367.199656] device syz_tun left promiscuous mode [ 367.227238] device syz_tun left promiscuous mode 03:54:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:54:18 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000}) 03:54:18 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) dup3(r0, r1, 0x0) 03:54:18 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) 03:54:18 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:18 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:18 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x40, 0x0) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000100)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) close(r3) r4 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x6, 0x4000) ioctl$BLKROGET(r4, 0x125e, &(0x7f00000000c0)) 03:54:18 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0xc0045878, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:54:18 executing program 4: 03:54:18 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}) 03:54:18 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2625cf547048ec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:18 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 367.855793] device syz_tun entered promiscuous mode 03:54:18 executing program 4: 03:54:18 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = fcntl$dupfd(r1, 0x406, r0) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000080)={{0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x306, @random="afc5dd3f8fa3"}, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}, 'veth0\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r3) 03:54:18 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}) 03:54:18 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 367.921296] device syz_tun left promiscuous mode [ 367.999642] device syz_tun entered promiscuous mode [ 368.046366] device syz_tun left promiscuous mode 03:54:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:54:19 executing program 7: r0 = socket$inet(0x10, 0x4000000003, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="24000000220007031dfffd946f6105000000000000007d21fe1c4095421ba3a20400ff7e", 0x24}], 0x1}, 0x0) 03:54:19 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:19 executing program 4: mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000000)='./file0\x00') r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) readv(r0, &(0x7f0000001540)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1) 03:54:19 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x8903, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:54:19 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000}) 03:54:19 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:19 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{}, {}]}) close(r2) 03:54:19 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x3900000000000000}) 03:54:19 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:19 executing program 7: msgsnd(0x0, &(0x7f00000000c0)={0x1}, 0x8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) msgrcv(0x0, &(0x7f0000000000)={0x0, ""/65}, 0x49, 0x0, 0x0) 03:54:19 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:19 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0xf, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) r0 = socket$inet6(0xa, 0x1000000000003, 0x7) ioctl(r0, 0x8912, &(0x7f0000000440)="027ec83d6d345f8f762070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0206d400020000000080000000009c00"], 0x10}, 0x1}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) [ 368.659098] device syz_tun entered promiscuous mode [ 368.676496] device syz_tun entered promiscuous mode [ 368.718144] device syz_tun left promiscuous mode [ 368.731375] device syz_tun left promiscuous mode 03:54:19 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0xc804000000000000}) 03:54:19 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:19 executing program 6: r0 = socket$inet6(0xa, 0x1000000000003, 0x80) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x4000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) [ 368.841296] device syz_tun entered promiscuous mode [ 368.881208] device syz_tun left promiscuous mode 03:54:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:54:20 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:20 executing program 4: r0 = socket$inet6(0xa, 0x805, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x100) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000300), &(0x7f00000008c0)=0x4) r2 = socket$inet6(0xa, 0x400000000001, 0x0) socket$packet(0x11, 0x0, 0x300) truncate(&(0x7f00000004c0)='./bus\x00', 0xa9a1) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc)=0x3, 0x348) r3 = dup(r2) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000140), &(0x7f0000000580)=0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x20000000000002, &(0x7f0000000740)=0x7fff, 0x4) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000700)={0x0, 0x4}, &(0x7f0000000780)=0x8) syz_open_dev$adsp(&(0x7f0000000380)='/dev/adsp#\x00', 0x4, 0x50000) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000007c0)={r4, 0x9b, "953583e5ca2ec0aca8d331779d6b9d73a1bcd80840b689f5ada765903c9beb4a8da3af25a765dae83f77df6909f28486591861d51bc7b11444b81669db8debdb955022c9737c250a0ec1c1ffc14902c1143fba130e806a4a7cf09be3c16f8b0adb36b920c1b46ba8f164537afdf890c69a7444bd922f744a8498a21ec79c4a2987768e585fbfc8523e0fcc2379ee9e85bb73d87daebdd48c80fcd7"}, &(0x7f0000000880)=0xa3) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000540)={@loopback, @broadcast, 0x0}, &(0x7f0000000040)=0xc) sendmsg$can_bcm(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x1d, r5}, 0x10, &(0x7f0000000640)={&(0x7f0000000a80)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x4000000) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000600), 0xc) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000080)) ioctl$int_in(r3, 0x5421, &(0x7f00000000c0)=0x3) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f00000001c0)=""/205) sendto$inet6(r2, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000006c0)) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000003c0)=""/234) open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, &(0x7f0000000100), 0x8000fffffffe) 03:54:20 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x8941, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:54:20 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x39000000}) 03:54:20 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:20 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x20000000000003, 0x0) write(r1, &(0x7f00000000c0)="220000005e000721044f2cc849261574a45855b7d88bd38c7e7fb5221d091a1dba11", 0x22) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r3) socket$inet6(0xa, 0x863ea853c4b88e51, 0x68) 03:54:20 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 03:54:20 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:20 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 369.541211] device syz_tun entered promiscuous mode [ 369.551775] device syz_tun entered promiscuous mode [ 369.621924] device syz_tun left promiscuous mode [ 369.633247] device syz_tun left promiscuous mode 03:54:20 executing program 7: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000340)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[]}, 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002e0019018200000000000000020000000c00000008000100040000008e5117"], 0x1}, 0x1}, 0x0) 03:54:20 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}) 03:54:20 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f0000000000), 0x4) 03:54:20 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:20 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:20 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x8906, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) [ 369.815742] device syz_tun entered promiscuous mode [ 369.877221] device syz_tun left promiscuous mode 03:54:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:54:21 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:54:21 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbffffff00000000}) 03:54:21 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:21 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:21 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/fib_triestat\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/90, 0x5a}], 0x1, 0x0) 03:54:21 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="075cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) 03:54:21 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x8904, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) [ 370.394353] device syz_tun entered promiscuous mode 03:54:21 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6ffffff}) 03:54:21 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:21 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 370.417349] device syz_tun entered promiscuous mode 03:54:21 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/202, 0xca}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/104, 0x68}], 0x3) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002380), 0x5, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) [ 370.451266] device syz_tun left promiscuous mode [ 370.469741] device syz_tun left promiscuous mode 03:54:21 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) 03:54:21 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x5450, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:54:21 executing program 6: r0 = socket$inet6(0xa, 0xa, 0x4001003) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = dup3(r0, r0, 0x80000) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000240)={0x0, 0x0, 0x5, {0x4, 0x6}, {0x34b26686, 0x2}, @rumble={0x4, 0x1}}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0xffffffffffffffff, 0x0) fremovexattr(r3, &(0x7f00000001c0)=@random={'trusted.', 'tunl0\x00'}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)=0x1000000000002) signalfd(r3, &(0x7f0000000200)={0x40}, 0x8) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'tunl0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @random="b286998f745e"}, 0x10) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x105000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000180)) close(r3) 03:54:21 executing program 7: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local={0xac, 0x14, 0x14, 0xaa}, @in6=@remote={0xfe, 0x80, [], 0xbb}}}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}}, 0x0, @in=@multicast2=0xe0000002}}, 0xe8) [ 370.561489] device syz_tun entered promiscuous mode [ 370.610718] device syz_tun entered promiscuous mode [ 370.639147] device syz_tun left promiscuous mode [ 370.649152] device syz_tun left promiscuous mode 03:54:22 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:54:22 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:22 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:22 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/202, 0xca}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/104, 0x68}], 0x3) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002380), 0x5, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 03:54:22 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}) 03:54:22 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x4e24, 0x4e20, 0x8}}}}}}, &(0x7f0000000040)) 03:54:22 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:54:22 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0xc020660b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:54:22 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) [ 371.261927] device syz_tun entered promiscuous mode [ 371.269111] device syz_tun entered promiscuous mode [ 371.298926] device syz_tun left promiscuous mode 03:54:22 executing program 7: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$P9_RVERSION(r0, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.L'}, 0x15) 03:54:22 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2ff1f54cf252600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:22 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec487054cf252600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:22 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/202, 0xca}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/104, 0x68}], 0x3) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002380), 0x5, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) [ 371.314644] device syz_tun left promiscuous mode 03:54:22 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x4020940d, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:54:22 executing program 6: pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x80800) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000180)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000004, 0x8) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000600)={"00ac7300000000e9eb973f820f7c4000", 0x2020}) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f00000002c0)={'nat\x00', 0xd4, "08730a764dac3aa5228c19348830b5f699c4e061bd5a4195f29443f5addbcb32e7a332cce5c2cb451316389056f1bde2e996209114b8784bd9c5925f0412d6cd2064b7e34427e4889bf7d9b1832a27356d038d079af8967f2b6b2734a6cbd11c436b6716ee43a5482d29e18e3a18f34fc1138d6782718f104d259340225257d2c4a6dd1046a771c7c24570380b9c8b2af82ed1bf077f103d0e6b800a96ff78e1a106fee7ece21efd1d02550565248a5f77abffb2602bf84d1ceeec9a511736543d26ff4d10ba6d9fc6fc53f7dedf39731d57d2de"}, &(0x7f0000000080)=0xf8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @random="b286998f745e"}, 0xfffffffffffffeb3) syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0xfffffffffffffffe, 0x101000) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0x8, 0x3}}, 0x30) close(r3) 03:54:22 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcffffff00000000}) [ 371.431222] device syz_tun entered promiscuous mode [ 371.495208] device syz_tun left promiscuous mode 03:54:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:54:23 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:23 executing program 7: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000600)={{{@in=@remote={0xac, 0x14, 0x14, 0xbb}, @in6}, {}, {}, 0x0, 0x6e6bb6}, {{@in6=@remote={0xfe, 0x80, [], 0xbb}}, 0x0, @in=@multicast1=0xe0000001}}, 0xe8) 03:54:23 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:23 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000}) 03:54:23 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/202, 0xca}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/104, 0x68}], 0x3) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002380), 0x5, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 03:54:23 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x2, 0x100000001}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={r3, @in6={{0xa, 0x4e23, 0xfff, @local={0xfe, 0x80, [], 0xaa}, 0x3}}}, 0x84) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={r3, 0xffffffffffffff73}, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:54:23 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x8916, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:54:23 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbffffff}) 03:54:23 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:23 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 372.129953] device syz_tun entered promiscuous mode [ 372.141057] device syz_tun entered promiscuous mode 03:54:23 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) 03:54:23 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002380), 0x5, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 03:54:23 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:23 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}) [ 372.209187] device syz_tun left promiscuous mode [ 372.224139] device syz_tun left promiscuous mode 03:54:23 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002380), 0x5, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 03:54:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:54:23 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2625cf541fffe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:23 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x7, 0x800) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000300)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x9}, &(0x7f0000000140)=0x8) msgget(0x0, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={r3, @in={{0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x2, 0x100000000}, &(0x7f0000000240)=0x90) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x200, 0x0) ioctl$BLKRESETZONE(r5, 0x40101283, &(0x7f00000000c0)={0x8001, 0x9}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r6, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r0) inotify_init() 03:54:23 executing program 7: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r2 = getpgrp(0x0) r3 = getpgrp(0xffffffffffffffff) kcmp(r2, r3, 0x0, r0, r1) 03:54:23 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x8982, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:54:23 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c8}) 03:54:23 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:23 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002380), 0x5, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 03:54:23 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}) 03:54:23 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:23 executing program 4: r0 = socket(0x10, 0x803, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/202, 0xca}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/104, 0x68}], 0x3) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002380), 0x5, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 03:54:23 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:24 executing program 7: 03:54:24 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x39}) [ 373.048068] device syz_tun entered promiscuous mode [ 373.053821] device syz_tun entered promiscuous mode 03:54:24 executing program 4: sendto(0xffffffffffffffff, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000140)=""/202, 0xca}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/104, 0x68}], 0x3) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002380), 0x5, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) [ 373.108138] device syz_tun left promiscuous mode 03:54:24 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 373.146850] device syz_tun left promiscuous mode 03:54:24 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:54:24 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000600)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006f3f17c15ce9ca80000000000000000000000000000000000000000000200000000000000bd41b3466fd35f002d5a8feb2bf7b1daad5a987e074442bc427abcf5e504194f7af0a3aa4975a7e1da852eae52431a51a08176d730cc1e757fb0be188ff093df76699a1d38e8ca38ba6255571679fdf3d6f9fbef9f72921960ef0dcc", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x2) 03:54:24 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 03:54:24 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:24 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x9, 0x202000) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f00000000c0), 0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) epoll_wait(r0, &(0x7f0000000100)=[{}], 0x1, 0x10001) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r3) 03:54:24 executing program 4: r0 = socket(0x0, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/202, 0xca}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/104, 0x68}], 0x3) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002380), 0x5, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 03:54:24 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0xc0045878, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:54:24 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:24 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:24 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) [ 373.862668] device syz_tun entered promiscuous mode [ 373.872514] device syz_tun entered promiscuous mode 03:54:24 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82) memfd_create(&(0x7f00000000c0)='nodev\x00', 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0xfff, 0x0, 0x0, 0x1e, 0xc, "7937d83a3a69605f5f10bb4ca50d6d13f1888e221078637723621cf6c83dcab6e9e3c0757e37d52598d1a573ae2556af1948da7ff4b1c257ed40d36215ee8e80", "3124b0133f40b6803c0df5521bedf5e94739cfe70038dcfb62a600a3bb20ed8133e10096bb3547bffa8a81a53e333ae7e240046a05e1ef51ee4e00e3f3e78de6", "50ff9cd5508801ac9e5f6a6d2b0266f6dc2085a4c7cb23b3912e778e9229c3d5", [0x5, 0x8]}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, "e1d3f877e5eae453e55d7d64d00d4901baed21f7de92a8669b38ccd6260857dbf5ae46354569636517b50f805ae208258dbb7d0abe8d208f0f1bcc885c8ba93c", "fe047b3177f4173b6605afb988de9bbae0932dee7e07195d78f7ddd19a373d5aa0a55519ff855900000002e200", "ee42e3ef1d1772a9432c220303b70b708ad791139c2982fccc5d747a3131995a"}) 03:54:24 executing program 4: r0 = socket(0x10, 0x0, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/202, 0xca}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/104, 0x68}], 0x3) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002380), 0x5, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) [ 373.920148] device syz_tun left promiscuous mode [ 373.933175] device syz_tun left promiscuous mode 03:54:24 executing program 6: r0 = socket$inet6(0xa, 0x1000080040005, 0xffffffffe) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x100000080000000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x10100, 0x0) getpeername$packet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000100)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', r4}) ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f0000000340)) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000300)={0x100000000, 0x200, 0x0, 0x1, 0x963, 0x9, 0x4, 0x3f, 0xffffffff, 0x4}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f00000002c0)=ANY=[@ANYRES16=r4]) close(r2) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000140)=""/253, &(0x7f0000000240)=0xfd) 03:54:24 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:24 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x8901, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:54:24 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 374.053393] device syz_tun entered promiscuous mode [ 374.059608] device syz_tun entered promiscuous mode [ 374.102209] device syz_tun left promiscuous mode [ 374.111327] device syz_tun left promiscuous mode 03:54:25 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:54:25 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00}) 03:54:25 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(0xffffffffffffffff, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/202, 0xca}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/104, 0x68}], 0x3) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002380), 0x5, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 03:54:25 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername(r0, &(0x7f0000000100)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, &(0x7f0000000180)=0x80) dup3(r0, r1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040)=[{}], 0x1) 03:54:25 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:25 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:25 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x7500, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:54:25 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:54:25 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x805, 0x0) sendto$inet(r0, &(0x7f0000000200)="f1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 03:54:25 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}) 03:54:25 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee), 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/202, 0xca}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/104, 0x68}], 0x3) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002380), 0x5, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 03:54:25 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:25 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 374.735325] device syz_tun entered promiscuous mode [ 374.741038] device syz_tun entered promiscuous mode [ 374.786690] device syz_tun left promiscuous mode [ 374.797431] device syz_tun left promiscuous mode 03:54:25 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x4, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:54:25 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/202, 0xca}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/104, 0x68}], 0x3) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002380), 0x5, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 03:54:25 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}) [ 374.921654] device syz_tun entered promiscuous mode [ 374.964129] device syz_tun left promiscuous mode 03:54:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:54:26 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000100)=0x54) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x7}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000002c0)={0x3, 0x3, 0x4, 0xffffffffffffff81, 0x5, 0xffff, 0xfa8, 0x3ff, r4}, &(0x7f0000000300)=0x20) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) r5 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x9, 0x181000) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f0000000180)=0xc, 0x4) setsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f00000001c0)=0x9, 0x1) 03:54:26 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001400)={&(0x7f00000001c0)={0x10}, 0xc, &(0x7f00000013c0)={&(0x7f0000000200)=@ipv6_getanyicast={0x14, 0x12, 0x105, 0x0, 0x0, {0xa}}, 0x14}, 0x1}, 0x0) recvmmsg(r0, &(0x7f000000b000)=[{{0x0, 0x0, &(0x7f00000089c0)=[{&(0x7f0000006780)=""/4096, 0x1000}, {&(0x7f0000007940)=""/4096, 0x1000}], 0x2, &(0x7f0000008a40)=""/128, 0x80}}, {{&(0x7f0000008ac0)=@pptp={0x0, 0x0, {0x0, @multicast1}}, 0x80, &(0x7f0000009f40), 0x0, &(0x7f000000a000)=""/4096, 0x1000}}], 0x2, 0x0, &(0x7f000000b1c0)={0x77359400}) 03:54:26 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:26 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:26 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/202, 0xca}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/104, 0x68}], 0x3) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002380), 0x5, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 03:54:26 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}) 03:54:26 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x7200, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:54:26 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:26 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2625cf541fffe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:26 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000}) 03:54:26 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b000000000000", 0x10, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/202, 0xca}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/104, 0x68}], 0x3) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002380), 0x5, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 03:54:26 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x4) [ 375.573281] device syz_tun entered promiscuous mode [ 375.593136] device syz_tun entered promiscuous mode [ 375.645858] device syz_tun left promiscuous mode 03:54:26 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:26 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:26 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x4) [ 375.699872] device syz_tun left promiscuous mode 03:54:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:54:27 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}) 03:54:27 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000", 0x11, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/202, 0xca}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/104, 0x68}], 0x3) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002380), 0x5, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 03:54:27 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x6f00, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:54:27 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) close(r2) 03:54:27 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1}, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x108) 03:54:27 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:27 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:27 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9000000}) 03:54:27 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2625cf547048ec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:27 executing program 7: 03:54:27 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000140)=""/202, 0xca}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/104, 0x68}], 0x3) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002380), 0x5, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 03:54:27 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 376.437382] device syz_tun entered promiscuous mode [ 376.446542] device syz_tun entered promiscuous mode 03:54:27 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 03:54:27 executing program 7: [ 376.484438] device syz_tun left promiscuous mode 03:54:27 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0000000000040000000000") r1 = socket$packet(0x11, 0xffffffffffffffff, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) [ 376.519380] device syz_tun left promiscuous mode 03:54:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:54:28 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000140)=""/202, 0xca}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/104, 0x68}], 0x3) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002380), 0x5, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 03:54:28 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:28 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x14, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:54:28 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:28 executing program 7: 03:54:28 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8040000}) 03:54:28 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x7c, 0x4}) 03:54:28 executing program 7: 03:54:28 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0xd900000000000000}) 03:54:28 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000140)=""/202, 0xca}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/104, 0x68}], 0x3) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002380), 0x5, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 03:54:28 executing program 7: 03:54:28 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:28 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 377.285750] device syz_tun entered promiscuous mode [ 377.292086] device syz_tun entered promiscuous mode 03:54:28 executing program 7: 03:54:28 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x7600, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) [ 377.338141] device syz_tun left promiscuous mode [ 377.345153] device syz_tun left promiscuous mode [ 377.409307] device syz_tun entered promiscuous mode [ 377.437259] device syz_tun left promiscuous mode 03:54:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:54:29 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x7fffffff, 0x20000) accept$packet(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000140)={r2, 0x1, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x13}}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x3e0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) close(r4) fcntl$setsig(r4, 0xa, 0x2) 03:54:29 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/104, 0x68}], 0x2) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002380), 0x5, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 03:54:29 executing program 7: 03:54:29 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}) 03:54:29 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:29 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:29 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x6d00, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:54:29 executing program 7: 03:54:29 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2ff1f54cf252600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:29 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000}) 03:54:29 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 378.147614] device syz_tun entered promiscuous mode 03:54:29 executing program 7: 03:54:29 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x111000, 0x54) write$FUSE_NOTIFY_DELETE(r1, &(0x7f00000000c0)={0x33, 0x6, 0x0, {0x1, 0x4, 0xa, 0x0, 'mime_type,'}}, 0x33) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000001c0)={@empty, 0x0}, &(0x7f0000000200)=0x14) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000240)={r3, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r4) 03:54:29 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/104, 0x68}], 0x2) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002380), 0x5, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) [ 378.191371] device syz_tun left promiscuous mode 03:54:29 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 378.234896] device syz_tun entered promiscuous mode [ 378.282460] device syz_tun left promiscuous mode 03:54:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:54:29 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:29 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x6e00, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:54:29 executing program 7: 03:54:29 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:29 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) 03:54:29 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/104, 0x68}], 0x2) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002380), 0x5, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 03:54:29 executing program 6: r0 = socket$inet6(0xa, 0x80001, 0xfffffffffffffffc) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x264080, 0x0) r3 = getuid() getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000200)=0xe8) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x8022, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid={'access', 0x3d, r3}, 0x2c}, {@mmap='mmap', 0x2c}, {@version_u='version=9p2000.u', 0x2c}, {@access_uid={'access', 0x3d, r4}, 0x2c}, {@version_u='version=9p2000.u', 0x2c}, {@msize={'msize', 0x3d, 0x800}, 0x2c}, {@version_u='version=9p2000.u', 0x2c}, {@dfltuid={'dfltuid', 0x3d, r5}, 0x2c}, {@access_client='access=client', 0x2c}]}}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) r6 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0xe, 0x101081) write$P9_RSTAT(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="4b0000007d010000004400000001000080040100000008000000000000000000100100040000200000000500006e657431080073797a5f74756e000300277d000000000000000000000000"], 0x4b) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000180)={r7, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:54:29 executing program 7: 03:54:29 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 03:54:29 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:29 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:29 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/202, 0xca}, {&(0x7f0000000380)=""/104, 0x68}], 0x2) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002380), 0x5, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 03:54:29 executing program 7: [ 379.007898] device syz_tun entered promiscuous mode [ 379.014488] device syz_tun entered promiscuous mode 03:54:30 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) 03:54:30 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={"00ac730000000000ec973f820f7c4000", 0x201e}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) write$P9_RSTAT(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x70) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @random="b286998f745e"}, 0x10) r5 = getpgrp(0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000001c0)=r5) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000001900)={0x4000000000000, 0xdf01, 0xa0, 0x2, 0x10001, 0x4, 0x5}, 0xc) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) mq_timedreceive(r3, &(0x7f0000000680)=""/4096, 0x1000, 0x767b, &(0x7f0000000180)={r6, r7+30000000}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f00000017c0)={{0xa, 0x3, 0x7ff, 0x80000000, 'syz0\x00', 0x4}, 0x0, 0x20000000, 0xfffffffffffffff7, r5, 0x7, 0x9, 'syz1\x00', &(0x7f0000000600)=['-em1\x00', '&selfuser', 'GPL\x00', 'vmnet0ppp1vboxnet1', '!eth0&$nodev-keyringeth1^\x00', '\x00', '\x00'], 0x40, [], [0x8, 0xfffffffffffffffc, 0x401, 0x4]}) close(r2) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000200)=0x3, 0x3379e97ac295d130) write$FUSE_DIRENT(r3, &(0x7f0000001680)=ANY=[@ANYBLOB="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"], 0x140) lgetxattr(&(0x7f0000001940)='./file0\x00', &(0x7f0000000240)=@random={'system.', '%\x00'}, &(0x7f0000001980)=""/196, 0xffffffffffffff84) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000400)={0x550b, {{0xa, 0x4e23, 0xfffffffffffffff9, @dev={0xfe, 0x80, [], 0xf}, 0x7}}}, 0x88) write$P9_RSETATTR(r3, &(0x7f00000005c0)={0x7, 0x1b, 0x2}, 0x7) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x2, 0x4) [ 379.056130] device syz_tun left promiscuous mode [ 379.067098] device syz_tun left promiscuous mode [ 379.113438] device syz_tun entered promiscuous mode [ 379.163241] device syz_tun left promiscuous mode 03:54:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:54:30 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:30 executing program 7: 03:54:30 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 03:54:30 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:30 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x7400, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:54:30 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/202, 0xca}, {&(0x7f0000000380)=""/104, 0x68}], 0x2) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002380), 0x5, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 03:54:30 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r0) 03:54:30 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:30 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000}) 03:54:30 executing program 7: 03:54:30 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:30 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/202, 0xca}, {&(0x7f0000000380)=""/104, 0x68}], 0x2) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002380), 0x5, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 03:54:30 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) 03:54:30 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 379.868594] device syz_tun entered promiscuous mode [ 379.879754] device syz_tun entered promiscuous mode 03:54:30 executing program 7: [ 379.936319] device syz_tun left promiscuous mode [ 379.950128] device syz_tun left promiscuous mode 03:54:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:54:31 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:31 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x3, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:54:31 executing program 7: 03:54:31 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:31 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/202, 0xca}, {&(0x7f0000000fc0)=""/4096, 0x1000}], 0x2) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002380), 0x5, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 03:54:31 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc804}) 03:54:31 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x800, 0x0) connect$llc(r1, &(0x7f0000000240)={0x1a, 0x32b, 0x977, 0x5, 0x200, 0x80000001}, 0x10) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000000c0)=0x9) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x80002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x100) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @random="b286998f745e"}, 0x10) r5 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0xfffffffffffffffa, 0x50041) readahead(r3, 0x3, 0x0) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000200)={r4, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) getpeername$packet(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000001c0)=0x14) close(r3) 03:54:31 executing program 7: 03:54:31 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:31 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/202, 0xca}, {&(0x7f0000000fc0)=""/4096, 0x1000}], 0x2) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002380), 0x5, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 03:54:31 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:31 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) [ 380.709100] device syz_tun entered promiscuous mode [ 380.724354] device syz_tun entered promiscuous mode 03:54:31 executing program 7: 03:54:31 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/202, 0xca}, {&(0x7f0000000fc0)=""/4096, 0x1000}], 0x2) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002380), 0x5, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 03:54:31 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 380.771268] device syz_tun left promiscuous mode [ 380.799896] device syz_tun left promiscuous mode 03:54:32 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000}) 03:54:32 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:32 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:54:32 executing program 7: 03:54:32 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x2, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:54:32 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0xc55, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:54:32 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec487054cf252600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:32 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/202, 0xca}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/104, 0x68}], 0x3) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002380), 0x5, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 03:54:32 executing program 7: 03:54:32 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:32 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9}) [ 381.573364] device syz_tun entered promiscuous mode [ 381.581103] device syz_tun entered promiscuous mode 03:54:32 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:32 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/202, 0xca}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/104, 0x68}], 0x3) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 03:54:32 executing program 7: 03:54:32 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}) 03:54:32 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 381.614403] device syz_tun left promiscuous mode [ 381.631247] device syz_tun left promiscuous mode 03:54:32 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") fcntl$setflags(r0, 0x2, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00aca706000000f91c6a3f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x2000, 0x0) close(r2) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:54:32 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x7300, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) [ 381.711391] device syz_tun entered promiscuous mode [ 381.723039] device syz_tun entered promiscuous mode [ 381.750494] Unknown ioctl 44672 [ 381.760141] device syz_tun left promiscuous mode [ 381.765097] Unknown ioctl 44672 [ 381.781167] device syz_tun left promiscuous mode 03:54:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:54:33 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:33 executing program 7: 03:54:33 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}) 03:54:33 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/202, 0xca}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/104, 0x68}], 0x3) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 03:54:33 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:33 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x5, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:54:33 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffbffffff) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000080)={0x1, 0x3, [@random="26775775c3a4", @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]]}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:54:33 executing program 7: 03:54:33 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}) 03:54:33 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:33 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/202, 0xca}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/104, 0x68}], 0x3) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) [ 382.425359] device syz_tun entered promiscuous mode [ 382.436832] device syz_tun entered promiscuous mode 03:54:33 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:33 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/202, 0xca}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/104, 0x68}], 0x3) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002380), 0x0, &(0x7f0000002400)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 03:54:33 executing program 7: 03:54:33 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x7100, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) [ 382.480644] device syz_tun left promiscuous mode [ 382.487102] device syz_tun left promiscuous mode [ 382.563657] device syz_tun entered promiscuous mode [ 382.590164] device syz_tun left promiscuous mode 03:54:34 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:34 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/202, 0xca}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/104, 0x68}], 0x3) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002380), 0x0, &(0x7f0000002400)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 03:54:34 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:34 executing program 7: 03:54:34 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:54:34 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000080)={'nat\x00'}, &(0x7f00000000c0)=0x24) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000140)={0x40}, 0x4) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) r4 = dup(r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000100)={0x17, 0x1, 0x1, "2ee99fbc6acfc2f76b5ed332068d0ab60b2604b7279d8d"}) close(r2) 03:54:34 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) 03:54:34 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x7700, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:54:34 executing program 7: 03:54:34 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}) 03:54:34 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/202, 0xca}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/104, 0x68}], 0x3) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002380), 0x0, &(0x7f0000002400)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 03:54:34 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 383.305442] device syz_tun entered promiscuous mode 03:54:34 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:34 executing program 7: 03:54:34 executing program 7: [ 383.331123] device syz_tun entered promiscuous mode [ 383.348244] device syz_tun left promiscuous mode 03:54:34 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1300, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:54:34 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000}) 03:54:34 executing program 7: 03:54:34 executing program 4: 03:54:34 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 383.427549] device syz_tun left promiscuous mode [ 383.435620] device syz_tun entered promiscuous mode [ 383.481147] device syz_tun left promiscuous mode 03:54:35 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:54:35 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:35 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000), 0xc) 03:54:35 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000003) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmmsg(r1, &(0x7f0000003480)=[{{&(0x7f0000000840)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x80, &(0x7f00000008c0), 0x0, &(0x7f0000003d80)}}, {{&(0x7f0000000a40)=@pppoe={0x18, 0x0, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'veth0_to_bridge\x00'}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000400)="01d47c3c6e5674f32998293cc3a8a6d8e90d8b18db1274c39546ba4143e66a9a5e261d84afd2f8e721817f63736b510003133171fd59553e", 0x38}, {&(0x7f0000000540)="f8164c73514112963b8ba695e7", 0xd}, {&(0x7f0000001080)="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", 0x1000}], 0x3, &(0x7f00000000c0)=[{0x68, 0x18b, 0x3, "a0a9f19b1a777e83c0c610eeb1eae0cb35bb322ef4f6d77ca2b82297c0ea8d2b811e958bc4348943d88faf497d6fd7049015b02be96d8f87a82c10aa926c4d6028c467072deeb520d406496ec8913b17b3"}, {0x88, 0x107, 0x100000001, "f745fb25e387a5188dab0bc9212c5d490f0e795615a9182a0eefc4d07962b238e7ec7ee34515eed4da77cedccc17c852f3222a1cb31bb7c61b99d11a7faf33291df9470586337af5074b90d0b7a61d9695aca4cabe81c236862579e08a50e522e2fce04aef5cbcafa2e98f24de05d455f177058abd3b71"}, {0x38, 0x1, 0xfffffffffffffff7, "6cc723036c1cac195c6aac488e774be595db08e2761c3b3262c5b0b3788d472c1c28c56885263925"}], 0x128}}], 0x2, 0x0) 03:54:35 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:35 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000}) 03:54:35 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) close(r0) ioctl(r0, 0x890f, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:54:35 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x7000, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:54:35 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}) 03:54:35 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mem_exclusive\x00', 0x2, 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f00000004c0)='3', 0x1}], 0x1, 0x0) 03:54:35 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:35 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r2 = accept(r1, 0x0, &(0x7f0000000000)) sendmmsg$unix(r2, &(0x7f00000010c0)=[{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000000c0)=[{&(0x7f00000002c0)='%', 0x1}], 0x1, &(0x7f0000000a00)}], 0x1, 0x0) [ 384.184455] device syz_tun entered promiscuous mode [ 384.190631] device syz_tun entered promiscuous mode 03:54:35 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:35 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}) 03:54:35 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/xfrm_stat\x00') write$P9_RLCREATE(r4, &(0x7f00000000c0)={0x18, 0xf, 0x2, {{0x0, 0x4, 0x2}, 0x2183903c}}, 0x18) close(r2) 03:54:35 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mem_exclusive\x00', 0x2, 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f00000004c0)='3', 0x1}], 0x1, 0x0) [ 384.237178] device syz_tun left promiscuous mode [ 384.243196] device syz_tun left promiscuous mode [ 384.290938] device syz_tun entered promiscuous mode [ 384.339576] device syz_tun left promiscuous mode 03:54:35 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:54:35 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [0x8c000000], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:54:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000018c0)={&(0x7f00000002c0)={0x10}, 0xc, &(0x7f0000001880)={&(0x7f0000000500)=@newlink={0x2c, 0x10, 0x15, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}]}, 0x2c}, 0x1}, 0x0) 03:54:35 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:35 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcffffff}) 03:54:35 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:35 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mem_exclusive\x00', 0x2, 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f00000004c0)='3', 0x1}], 0x1, 0x0) 03:54:35 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = dup3(r0, r0, 0x80000) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r3) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000080)=""/30) 03:54:36 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:36 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:36 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}) 03:54:36 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mem_exclusive\x00', 0x2, 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f00000004c0)='3', 0x1}], 0x1, 0x0) [ 385.064470] device syz_tun entered promiscuous mode [ 385.074591] device syz_tun entered promiscuous mode 03:54:36 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:36 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000}) 03:54:36 executing program 7: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000004c0)='3', 0x1}], 0x1, 0x0) 03:54:36 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 385.120260] device syz_tun left promiscuous mode [ 385.125760] device syz_tun left promiscuous mode 03:54:36 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:54:36 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000080)=""/191) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r2) 03:54:36 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:36 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [0x3f000000], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:54:36 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:36 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:36 executing program 7: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000004c0)='3', 0x1}], 0x1, 0x0) 03:54:36 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) 03:54:36 executing program 7: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000004c0)='3', 0x1}], 0x1, 0x0) 03:54:36 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 03:54:36 executing program 4 (fault-call:3 fault-nth:0): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/202, 0xca}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/104, 0x68}], 0x3) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002380), 0x5, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 03:54:36 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:36 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 385.883084] device syz_tun entered promiscuous mode [ 385.892985] device syz_tun entered promiscuous mode [ 385.938118] FAULT_INJECTION: forcing a failure. [ 385.938118] name failslab, interval 1, probability 0, space 0, times 0 [ 385.949469] CPU: 0 PID: 26104 Comm: syz-executor4 Not tainted 4.18.0-rc4-next-20180712+ #6 [ 385.959338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 385.968684] Call Trace: [ 385.971287] dump_stack+0x1c9/0x2b4 [ 385.974899] ? dump_stack_print_info.cold.2+0x52/0x52 [ 385.980077] ? kasan_check_read+0x11/0x20 [ 385.984215] ? rcu_is_watching+0x8c/0x150 [ 385.988349] should_fail.cold.4+0xa/0x11 [ 385.992399] ? lock_acquire+0x1e4/0x540 [ 385.996369] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 386.001460] ? lock_release+0xa30/0xa30 [ 386.005419] ? check_same_owner+0x340/0x340 [ 386.009730] ? rcu_note_context_switch+0x730/0x730 [ 386.014646] ? kasan_check_write+0x14/0x20 [ 386.018865] ? __mutex_lock+0x6c4/0x1680 [ 386.022922] ? save_stack+0xa9/0xd0 [ 386.026533] ? netlink_dump+0x9f/0xd50 [ 386.030405] ? kasan_slab_free+0xe/0x10 [ 386.034365] ? kmem_cache_free+0x86/0x2d0 [ 386.038495] ? consume_skb+0x19b/0x560 [ 386.042360] ? netlink_recvmsg+0x70f/0x1490 [ 386.046667] ? sock_recvmsg+0xd0/0x110 [ 386.050540] ? mutex_trylock+0x2b0/0x2b0 [ 386.054588] ? do_syscall_64+0x1b9/0x820 [ 386.058633] ? kasan_check_read+0x11/0x20 [ 386.062766] ? do_raw_spin_unlock+0xa7/0x2f0 [ 386.067176] ? kasan_check_write+0x14/0x20 [ 386.071395] ? do_raw_spin_lock+0xc1/0x200 [ 386.075611] ? trace_hardirqs_off+0xd/0x10 [ 386.079833] __should_failslab+0x124/0x180 [ 386.084291] should_failslab+0x9/0x14 [ 386.088082] kmem_cache_alloc_node+0x56/0x780 [ 386.092573] ? trace_hardirqs_off+0xd/0x10 [ 386.096808] ? quarantine_put+0x10d/0x1b0 [ 386.101031] __alloc_skb+0x119/0x790 [ 386.104735] ? skb_scrub_packet+0x490/0x490 [ 386.109040] ? kfree_skbmem+0x10b/0x230 [ 386.113007] ? skb_gro_receive+0x12c0/0x12c0 [ 386.117402] ? netlink_skb_destructor+0x190/0x210 [ 386.122229] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 386.127750] ? consume_skb+0x1a0/0x560 [ 386.131639] ? alloc_skb_with_frags+0x770/0x770 [ 386.136455] netlink_dump+0x2f3/0xd50 [ 386.140245] ? lock_release+0xa30/0xa30 [ 386.144222] ? netlink_broadcast+0x50/0x50 [ 386.148461] ? __check_object_size+0x9d/0x5f2 [ 386.152947] netlink_recvmsg+0xf84/0x1490 [ 386.157079] ? netlink_dump+0xd50/0xd50 [ 386.161038] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 386.166048] ? rw_copy_check_uvector+0x30d/0x3e0 [ 386.170812] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 386.176333] ? import_iovec+0x269/0x470 [ 386.180305] ? dup_iter+0x270/0x270 [ 386.184011] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 386.189532] ? _copy_from_user+0xdf/0x150 [ 386.193684] ? move_addr_to_kernel.part.20+0x100/0x100 [ 386.198968] ? security_socket_recvmsg+0x9b/0xc0 [ 386.203707] ? netlink_dump+0xd50/0xd50 [ 386.207664] sock_recvmsg+0xd0/0x110 [ 386.211362] ? __sock_recv_ts_and_drops+0x420/0x420 [ 386.216360] ___sys_recvmsg+0x2b6/0x680 [ 386.220326] ? ___sys_sendmsg+0x930/0x930 [ 386.224470] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 386.229487] ? lock_acquire+0x1e4/0x540 [ 386.233464] ? get_pid_task+0xd8/0x1a0 [ 386.237338] ? poll_select_set_timeout+0x156/0x240 [ 386.242255] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 386.247775] __sys_recvmmsg+0x301/0xba0 [ 386.251741] ? proc_fail_nth_write+0x9e/0x210 [ 386.256220] ? __ia32_sys_recvmsg+0xb0/0xb0 [ 386.260619] ? lock_acquire+0x1e4/0x540 [ 386.264588] ? __might_fault+0x12b/0x1e0 [ 386.268632] ? lock_release+0xa30/0xa30 [ 386.272600] ? lock_release+0xa30/0xa30 [ 386.276646] ? check_same_owner+0x340/0x340 [ 386.280968] ? fsnotify+0x14e0/0x14e0 [ 386.284938] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 386.290459] ? _copy_from_user+0xdf/0x150 [ 386.294591] do_sys_recvmmsg+0xec/0x1a0 [ 386.298552] ? __sys_recvmmsg+0xba0/0xba0 [ 386.302686] __x64_sys_recvmmsg+0xbe/0x150 [ 386.306909] do_syscall_64+0x1b9/0x820 [ 386.310781] ? syscall_slow_exit_work+0x500/0x500 [ 386.315618] ? syscall_return_slowpath+0x5e0/0x5e0 [ 386.320531] ? syscall_return_slowpath+0x31d/0x5e0 [ 386.325965] ? prepare_exit_to_usermode+0x291/0x3b0 [ 386.330963] ? perf_trace_sys_enter+0xb10/0xb10 [ 386.335614] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 386.340459] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 386.345633] RIP: 0033:0x455a79 [ 386.348802] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 386.367933] RSP: 002b:00007f1b5069ac68 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 386.375627] RAX: ffffffffffffffda RBX: 00007f1b5069b6d4 RCX: 0000000000455a79 [ 386.382879] RDX: 000000000000000f RSI: 00000000200037c0 RDI: 0000000000000013 03:54:37 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c8}) 03:54:37 executing program 7: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuset.mem_exclusive\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f00000004c0)='3', 0x1}], 0x1, 0x0) 03:54:37 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 386.390282] RBP: 000000000072bea0 R08: 0000000020003700 R09: 0000000000000000 [ 386.397555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 386.404824] R13: 00000000004c0aad R14: 00000000004d0e90 R15: 0000000000000000 [ 386.444101] device syz_tun left promiscuous mode [ 386.450657] device syz_tun left promiscuous mode 03:54:37 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:54:37 executing program 4 (fault-call:3 fault-nth:1): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/202, 0xca}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/104, 0x68}], 0x3) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002380), 0x5, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 03:54:37 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000080)=0x1, &(0x7f00000000c0)=0x4) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x101000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0x0, 0x5, 0x209, 0x8, 0x400, 0x3, 0x200, 0x6000, 0x0}, &(0x7f0000000180)=0x20) setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000001c0)={r4}, 0x8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r6, 0x1, 0x6, @random="b286998f745e"}, 0x10) close(r5) 03:54:37 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}) 03:54:37 executing program 7: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuset.mem_exclusive\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f00000004c0)='3', 0x1}], 0x1, 0x0) 03:54:37 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [0x1f00], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:54:37 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:37 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 03:54:37 executing program 7: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuset.mem_exclusive\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f00000004c0)='3', 0x1}], 0x1, 0x0) 03:54:37 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6ffffff00000000}) [ 386.718757] FAULT_INJECTION: forcing a failure. [ 386.718757] name failslab, interval 1, probability 0, space 0, times 0 [ 386.730135] CPU: 0 PID: 26141 Comm: syz-executor4 Not tainted 4.18.0-rc4-next-20180712+ #6 [ 386.738525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 386.747864] Call Trace: [ 386.750442] dump_stack+0x1c9/0x2b4 [ 386.754068] ? dump_stack_print_info.cold.2+0x52/0x52 [ 386.759265] should_fail.cold.4+0xa/0x11 [ 386.763315] ? __kernel_text_address+0xd/0x40 [ 386.767809] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 386.773163] ? __save_stack_trace+0x8d/0xf0 [ 386.777474] ? save_stack+0xa9/0xd0 [ 386.781081] ? save_stack+0x43/0xd0 [ 386.784690] ? kasan_kmalloc+0xc4/0xe0 [ 386.788565] ? kasan_slab_alloc+0x12/0x20 [ 386.792696] ? kmem_cache_alloc_node+0x144/0x780 [ 386.797451] ? __alloc_skb+0x119/0x790 [ 386.801321] ? netlink_dump+0x2f3/0xd50 [ 386.805279] ? netlink_recvmsg+0xf84/0x1490 [ 386.809592] ? sock_recvmsg+0xd0/0x110 [ 386.813471] ? ___sys_recvmsg+0x2b6/0x680 [ 386.817602] ? __sys_recvmmsg+0x301/0xba0 [ 386.821732] ? do_sys_recvmmsg+0xec/0x1a0 [ 386.825859] ? __x64_sys_recvmmsg+0xbe/0x150 [ 386.830262] ? do_syscall_64+0x1b9/0x820 [ 386.834320] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 386.839671] ? kasan_check_write+0x14/0x20 [ 386.843887] ? __mutex_lock+0x6c4/0x1680 [ 386.848114] ? save_stack+0xa9/0xd0 [ 386.851724] ? netlink_dump+0x9f/0xd50 [ 386.855854] ? kasan_slab_free+0xe/0x10 [ 386.859814] ? kmem_cache_free+0x86/0x2d0 [ 386.863945] ? consume_skb+0x19b/0x560 [ 386.867816] ? sock_recvmsg+0xd0/0x110 [ 386.871684] ? mutex_trylock+0x2b0/0x2b0 [ 386.875731] ? do_syscall_64+0x1b9/0x820 [ 386.879775] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 386.885123] ? kasan_check_read+0x11/0x20 [ 386.889265] ? do_raw_spin_unlock+0xa7/0x2f0 [ 386.893659] __should_failslab+0x124/0x180 [ 386.897882] should_failslab+0x9/0x14 [ 386.901667] kmem_cache_alloc_node_trace+0x5a/0x770 [ 386.906661] ? kasan_kmalloc+0xc4/0xe0 [ 386.910541] __kmalloc_node_track_caller+0x33/0x70 [ 386.915457] __kmalloc_reserve.isra.41+0x3a/0xe0 [ 386.920196] __alloc_skb+0x155/0x790 [ 386.923892] ? skb_scrub_packet+0x490/0x490 [ 386.928226] ? kfree_skbmem+0x10b/0x230 [ 386.932192] ? skb_gro_receive+0x12c0/0x12c0 [ 386.936584] ? netlink_skb_destructor+0x190/0x210 [ 386.941410] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 386.946929] ? consume_skb+0x1a0/0x560 [ 386.950799] ? alloc_skb_with_frags+0x770/0x770 [ 386.955451] netlink_dump+0x2f3/0xd50 [ 386.959240] ? lock_release+0xa30/0xa30 [ 386.963206] ? netlink_broadcast+0x50/0x50 [ 386.967444] ? __check_object_size+0x9d/0x5f2 [ 386.971923] netlink_recvmsg+0xf84/0x1490 [ 386.976070] ? netlink_dump+0xd50/0xd50 [ 386.980031] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 386.985030] ? rw_copy_check_uvector+0x30d/0x3e0 [ 386.989780] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 386.995398] ? import_iovec+0x269/0x470 [ 386.999467] ? dup_iter+0x270/0x270 [ 387.003078] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 387.008607] ? _copy_from_user+0xdf/0x150 [ 387.012828] ? move_addr_to_kernel.part.20+0x100/0x100 [ 387.018445] ? security_socket_recvmsg+0x9b/0xc0 [ 387.023191] ? netlink_dump+0xd50/0xd50 [ 387.027168] sock_recvmsg+0xd0/0x110 [ 387.030866] ? __sock_recv_ts_and_drops+0x420/0x420 [ 387.035872] ___sys_recvmsg+0x2b6/0x680 [ 387.039846] ? ___sys_sendmsg+0x930/0x930 [ 387.043983] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 387.048994] ? lock_acquire+0x1e4/0x540 [ 387.053479] ? get_pid_task+0xd8/0x1a0 [ 387.057356] ? poll_select_set_timeout+0x156/0x240 [ 387.062270] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 387.067802] __sys_recvmmsg+0x301/0xba0 [ 387.072109] ? proc_fail_nth_write+0x9e/0x210 [ 387.076595] ? lock_acquire+0x1e4/0x540 [ 387.080565] ? __ia32_sys_recvmsg+0xb0/0xb0 [ 387.084874] ? lock_acquire+0x1e4/0x540 [ 387.088842] ? __might_fault+0x12b/0x1e0 [ 387.092886] ? lock_release+0xa30/0xa30 [ 387.096856] ? lock_release+0xa30/0xa30 [ 387.100826] ? check_same_owner+0x340/0x340 [ 387.105134] ? fsnotify+0x14e0/0x14e0 [ 387.108924] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 387.114459] ? _copy_from_user+0xdf/0x150 [ 387.118593] do_sys_recvmmsg+0xec/0x1a0 [ 387.122549] ? __sys_recvmmsg+0xba0/0xba0 [ 387.126951] ? syscall_slow_exit_work+0x500/0x500 [ 387.131778] __x64_sys_recvmmsg+0xbe/0x150 [ 387.135995] do_syscall_64+0x1b9/0x820 [ 387.139865] ? finish_task_switch+0x1d3/0x870 [ 387.144359] ? syscall_return_slowpath+0x5e0/0x5e0 [ 387.149290] ? syscall_return_slowpath+0x31d/0x5e0 [ 387.154218] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 387.159237] ? prepare_exit_to_usermode+0x291/0x3b0 [ 387.164249] ? perf_trace_sys_enter+0xb10/0xb10 [ 387.168904] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 387.173745] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 387.178920] RIP: 0033:0x455a79 [ 387.182091] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 387.201491] RSP: 002b:00007f1b5069ac68 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 387.209184] RAX: ffffffffffffffda RBX: 00007f1b5069b6d4 RCX: 0000000000455a79 03:54:38 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuset.mem_exclusive\x00', 0x2, 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f00000004c0)='3', 0x1}], 0x1, 0x0) 03:54:38 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd900}) [ 387.216441] RDX: 000000000000000f RSI: 00000000200037c0 RDI: 0000000000000013 [ 387.223692] RBP: 000000000072bea0 R08: 0000000020003700 R09: 0000000000000000 [ 387.230957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 387.238215] R13: 00000000004c0aad R14: 00000000004d0e90 R15: 0000000000000001 03:54:38 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuset.mem_exclusive\x00', 0x2, 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f00000004c0)='3', 0x1}], 0x1, 0x0) 03:54:38 executing program 4 (fault-call:3 fault-nth:2): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/202, 0xca}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/104, 0x68}], 0x3) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002380), 0x5, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 03:54:38 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}) 03:54:38 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000}) [ 387.269606] device syz_tun entered promiscuous mode [ 387.276080] device syz_tun entered promiscuous mode [ 387.300416] FAULT_INJECTION: forcing a failure. [ 387.300416] name failslab, interval 1, probability 0, space 0, times 0 [ 387.311763] CPU: 0 PID: 26171 Comm: syz-executor4 Not tainted 4.18.0-rc4-next-20180712+ #6 [ 387.320163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 387.329610] Call Trace: [ 387.332188] dump_stack+0x1c9/0x2b4 [ 387.335796] ? dump_stack_print_info.cold.2+0x52/0x52 [ 387.340970] ? kasan_check_read+0x11/0x20 [ 387.345101] ? rcu_is_watching+0x8c/0x150 [ 387.349250] should_fail.cold.4+0xa/0x11 [ 387.353297] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 387.358403] ? lock_release+0xa30/0xa30 [ 387.362539] ? check_same_owner+0x340/0x340 [ 387.366847] ? unwind_get_return_address+0x61/0xa0 [ 387.371761] ? rcu_note_context_switch+0x730/0x730 [ 387.376677] ? kasan_check_write+0x14/0x20 [ 387.380896] ? __mutex_lock+0x6c4/0x1680 [ 387.385027] ? save_stack+0xa9/0xd0 [ 387.388647] ? netlink_dump+0x9f/0xd50 [ 387.392524] ? __kasan_slab_free+0x11a/0x170 [ 387.396912] ? kasan_slab_free+0xe/0x10 [ 387.400868] ? kfree_skbmem+0x154/0x230 [ 387.404822] ? skb_free_datagram+0x1a/0xf0 [ 387.409124] ? netlink_recvmsg+0x70f/0x1490 [ 387.413425] ? mutex_trylock+0x2b0/0x2b0 [ 387.417472] ? __x64_sys_recvmmsg+0xbe/0x150 [ 387.421864] ? do_syscall_64+0x1b9/0x820 [ 387.425918] ? kasan_check_read+0x11/0x20 [ 387.430051] ? do_raw_spin_unlock+0xa7/0x2f0 [ 387.434445] ? kasan_check_write+0x14/0x20 [ 387.438675] ? do_raw_spin_lock+0xc1/0x200 [ 387.442896] ? trace_hardirqs_off+0xd/0x10 [ 387.447115] __should_failslab+0x124/0x180 [ 387.451339] should_failslab+0x9/0x14 [ 387.455140] kmem_cache_alloc_node+0x56/0x780 [ 387.459630] ? trace_hardirqs_off+0xd/0x10 [ 387.463847] ? quarantine_put+0x10d/0x1b0 [ 387.467976] __alloc_skb+0x119/0x790 [ 387.471671] ? skb_scrub_packet+0x490/0x490 [ 387.475986] ? kfree_skbmem+0x10b/0x230 [ 387.479943] ? skb_gro_receive+0x12c0/0x12c0 [ 387.484369] ? netlink_skb_destructor+0x190/0x210 [ 387.489215] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 387.494824] ? consume_skb+0x1a0/0x560 [ 387.498703] netlink_dump+0x2f3/0xd50 [ 387.502508] ? netlink_broadcast+0x50/0x50 [ 387.506736] netlink_recvmsg+0xf84/0x1490 [ 387.510875] ? netlink_dump+0xd50/0xd50 [ 387.514834] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 387.520354] ? rw_copy_check_uvector+0x30d/0x3e0 [ 387.525096] ? lock_acquire+0x1e4/0x540 [ 387.529054] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 387.534578] ? import_iovec+0x269/0x470 [ 387.538535] ? dup_iter+0x270/0x270 [ 387.542146] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 387.547670] ? _copy_from_user+0xdf/0x150 [ 387.551807] ? kasan_check_read+0x11/0x20 [ 387.555940] ? netlink_dump+0xd50/0xd50 [ 387.559985] sock_recvmsg_nosec+0x8c/0xb0 [ 387.564204] ? __sock_tx_timestamp+0xd0/0xd0 [ 387.568593] ___sys_recvmsg+0x2b6/0x680 [ 387.572551] ? ___sys_sendmsg+0x930/0x930 [ 387.576685] ? pvclock_read_flags+0x160/0x160 [ 387.581184] ? kvm_clock_read+0x25/0x30 [ 387.585151] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 387.590675] ? ktime_get_ts64+0x3a5/0x530 [ 387.594805] ? do_gettimeofday+0x180/0x180 [ 387.599044] ? rcu_note_context_switch+0x730/0x730 [ 387.603958] ? check_same_owner+0x340/0x340 [ 387.608265] __sys_recvmmsg+0x301/0xba0 [ 387.612223] ? __ia32_sys_recvmsg+0xb0/0xb0 [ 387.616529] ? lock_acquire+0x1e4/0x540 [ 387.620483] ? __might_fault+0x12b/0x1e0 [ 387.624523] ? lock_release+0xa30/0xa30 [ 387.628485] ? check_same_owner+0x340/0x340 [ 387.632791] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 387.638311] ? _copy_from_user+0xdf/0x150 [ 387.642451] do_sys_recvmmsg+0xec/0x1a0 [ 387.646417] ? __sys_recvmmsg+0xba0/0xba0 [ 387.650554] __x64_sys_recvmmsg+0xbe/0x150 [ 387.654772] do_syscall_64+0x1b9/0x820 [ 387.658639] ? finish_task_switch+0x1d3/0x870 [ 387.663298] ? syscall_return_slowpath+0x5e0/0x5e0 [ 387.668219] ? syscall_return_slowpath+0x31d/0x5e0 [ 387.673131] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 387.678128] ? prepare_exit_to_usermode+0x291/0x3b0 [ 387.683127] ? perf_trace_sys_enter+0xb10/0xb10 [ 387.687779] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 387.692633] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 387.697817] RIP: 0033:0x455a79 [ 387.701003] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 387.720201] RSP: 002b:00007f1b5069ac68 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 387.727896] RAX: ffffffffffffffda RBX: 00007f1b5069b6d4 RCX: 0000000000455a79 [ 387.735154] RDX: 000000000000000f RSI: 00000000200037c0 RDI: 0000000000000013 [ 387.742412] RBP: 000000000072bea0 R08: 0000000020003700 R09: 0000000000000000 [ 387.749676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 387.756935] R13: 00000000004c0aad R14: 00000000004d0e90 R15: 0000000000000002 03:54:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {&(0x7f0000000040)}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1000000000016) 03:54:38 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuset.mem_exclusive\x00', 0x2, 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f00000004c0)='3', 0x1}], 0x1, 0x0) 03:54:38 executing program 4 (fault-call:3 fault-nth:3): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/202, 0xca}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/104, 0x68}], 0x3) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002380), 0x5, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 03:54:38 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0xde, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) 03:54:38 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="b286998f745e"}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [0x4000000], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0x17}, 0x3, 0x4, 0x1f, 0x400, 0x2, 0x200, r3}) close(r2) 03:54:38 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000140)={{{@in=@remote, @in=@rand_addr}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f0000000240)=0xe8) getsockname(r0, &(0x7f0000000380)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000400)=0x80) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'b\x00', r3}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @random="b286998f745e"}, 0x10) r5 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x75, 0x9506b58d42850509) ioctl$TCSETS(r5, 0x5402, &(0x7f00000002c0)={0x453, 0x8, 0x6, 0x8001, 0x6cf, 0x200, 0x7836, 0x100, 0x2, 0x3f327286, 0x9, 0x400}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0x40505331, &(0x7f00000000c0)={{0x683ea05a, 0x80}, {0x5, 0x20}, 0x1, 0x5, 0x9}) close(r2) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000300)) [ 387.790364] device syz_tun left promiscuous mode [ 387.803217] device syz_tun left promiscuous mode [ 387.860285] FAULT_INJECTION: forcing a failure. [ 387.860285] name failslab, interval 1, probability 0, space 0, times 0 [ 387.871657] CPU: 1 PID: 26201 Comm: syz-executor4 Not tainted 4.18.0-rc4-next-20180712+ #6 [ 387.880064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 387.889427] Call Trace: [ 387.892039] dump_stack+0x1c9/0x2b4 [ 387.895672] ? dump_stack_print_info.cold.2+0x52/0x52 [ 387.900873] ? kasan_check_read+0x11/0x20 [ 387.905037] ? rcu_is_watching+0x8c/0x150 [ 387.909206] should_fail.cold.4+0xa/0x11 [ 387.913288] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 387.918406] ? lock_release+0xa30/0xa30 [ 387.922395] ? check_same_owner+0x340/0x340 [ 387.926711] ? unwind_get_return_address+0x61/0xa0 [ 387.931645] ? rcu_note_context_switch+0x730/0x730 [ 387.936580] ? kasan_check_write+0x14/0x20 [ 387.940808] ? __mutex_lock+0x6c4/0x1680 [ 387.944871] ? save_stack+0xa9/0xd0 [ 387.948504] ? netlink_dump+0x9f/0xd50 [ 387.952392] ? __kasan_slab_free+0x11a/0x170 [ 387.956798] ? kasan_slab_free+0xe/0x10 [ 387.960775] ? kfree_skbmem+0x154/0x230 [ 387.964738] ? skb_free_datagram+0x1a/0xf0 [ 387.968977] ? netlink_recvmsg+0x70f/0x1490 [ 387.973288] ? mutex_trylock+0x2b0/0x2b0 [ 387.977340] ? __x64_sys_recvmmsg+0xbe/0x150 [ 387.981748] ? do_syscall_64+0x1b9/0x820 [ 387.985803] ? kasan_check_read+0x11/0x20 [ 387.989951] ? do_raw_spin_unlock+0xa7/0x2f0 [ 387.994351] ? kasan_check_write+0x14/0x20 [ 387.998585] ? do_raw_spin_lock+0xc1/0x200 [ 388.002815] ? trace_hardirqs_off+0xd/0x10 [ 388.007139] __should_failslab+0x124/0x180 [ 388.011365] should_failslab+0x9/0x14 [ 388.015159] kmem_cache_alloc_node+0x56/0x780 [ 388.019644] ? trace_hardirqs_off+0xd/0x10 [ 388.023863] ? quarantine_put+0x10d/0x1b0 [ 388.027997] __alloc_skb+0x119/0x790 [ 388.031713] ? skb_scrub_packet+0x490/0x490 [ 388.036051] ? kfree_skbmem+0x10b/0x230 [ 388.040028] ? skb_gro_receive+0x12c0/0x12c0 [ 388.044434] ? netlink_skb_destructor+0x190/0x210 [ 388.049262] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 388.054788] ? consume_skb+0x1a0/0x560 [ 388.058668] netlink_dump+0x2f3/0xd50 [ 388.062457] ? netlink_broadcast+0x50/0x50 [ 388.066679] netlink_recvmsg+0xf84/0x1490 [ 388.070822] ? netlink_dump+0xd50/0xd50 [ 388.074802] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 388.080327] ? rw_copy_check_uvector+0x30d/0x3e0 [ 388.085069] ? lock_acquire+0x1e4/0x540 [ 388.089044] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 388.094582] ? import_iovec+0x269/0x470 [ 388.098553] ? dup_iter+0x270/0x270 [ 388.102166] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 388.107691] ? _copy_from_user+0xdf/0x150 [ 388.111839] ? kasan_check_read+0x11/0x20 [ 388.115987] ? netlink_dump+0xd50/0xd50 [ 388.119956] sock_recvmsg_nosec+0x8c/0xb0 [ 388.124104] ? __sock_tx_timestamp+0xd0/0xd0 [ 388.128496] ___sys_recvmsg+0x2b6/0x680 [ 388.132469] ? ___sys_sendmsg+0x930/0x930 [ 388.136611] ? pvclock_read_flags+0x160/0x160 [ 388.141108] ? kvm_clock_read+0x25/0x30 [ 388.145075] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 388.150616] ? ktime_get_ts64+0x3a5/0x530 [ 388.154751] ? do_gettimeofday+0x180/0x180 [ 388.158984] ? rcu_note_context_switch+0x730/0x730 [ 388.163909] ? check_same_owner+0x340/0x340 [ 388.168229] __sys_recvmmsg+0x301/0xba0 [ 388.172194] ? __ia32_sys_recvmsg+0xb0/0xb0 [ 388.176504] ? lock_acquire+0x1e4/0x540 [ 388.180470] ? __might_fault+0x12b/0x1e0 [ 388.184538] ? lock_release+0xa30/0xa30 [ 388.188502] ? check_same_owner+0x340/0x340 [ 388.192818] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 388.198344] ? _copy_from_user+0xdf/0x150 [ 388.202502] do_sys_recvmmsg+0xec/0x1a0 [ 388.206462] ? __sys_recvmmsg+0xba0/0xba0 [ 388.210607] __x64_sys_recvmmsg+0xbe/0x150 [ 388.214839] do_syscall_64+0x1b9/0x820 [ 388.218713] ? syscall_slow_exit_work+0x500/0x500 [ 388.223569] ? syscall_return_slowpath+0x5e0/0x5e0 [ 388.228484] ? syscall_return_slowpath+0x31d/0x5e0 [ 388.233424] ? prepare_exit_to_usermode+0x291/0x3b0 [ 388.238446] ? perf_trace_sys_enter+0xb10/0xb10 [ 388.243117] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 388.247958] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 388.253159] RIP: 0033:0x455a79 [ 388.256340] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 388.275557] RSP: 002b:00007f1b5069ac68 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 388.283267] RAX: ffffffffffffffda RBX: 00007f1b5069b6d4 RCX: 0000000000455a79 [ 388.290532] RDX: 000000000000000f RSI: 00000000200037c0 RDI: 0000000000000013 [ 388.297802] RBP: 000000000072bea0 R08: 0000000020003700 R09: 0000000000000000 [ 388.305075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 388.312342] R13: 00000000004c0aad R14: 00000000004d0e90 R15: 0000000000000003 [ 388.329963] device syz_tun entered promiscuous mode [ 388.363170] device syz_tun left promiscuous mode [ 446.845256] IPVS: stopping master sync thread 8280 ... [ 446.850820] device bridge_slave_1 left promiscuous mode [ 446.856479] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.868496] device bridge_slave_0 left promiscuous mode [ 446.874103] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.896226] team0 (unregistering): Port device team_slave_1 removed [ 446.904936] team0 (unregistering): Port device team_slave_0 removed [ 446.913246] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 446.927764] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 446.945937] bond0 (unregistering): Released all slaves [ 574.431322] INFO: task syz-executor5:26139 blocked for more than 140 seconds. [ 574.438748] Not tainted 4.18.0-rc4-next-20180712+ #6 [ 574.444393] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 574.452362] syz-executor5 D24424 26139 4478 0x00000004 [ 574.458067] Call Trace: [ 574.460717] __schedule+0x87c/0x1ed0 [ 574.464485] ? __sched_text_start+0x8/0x8 [ 574.468688] ? lock_acquire+0x1e4/0x540 [ 574.472686] ? mutex_spin_on_owner+0x2e5/0x550 [ 574.477273] ? lock_downgrade+0x8f0/0x8f0 [ 574.481448] ? retint_kernel+0x10/0x10 [ 574.485346] ? mutex_spin_on_owner+0x115/0x550 [ 574.489940] schedule+0xfb/0x450 [ 574.493307] ? __mutex_lock+0xbf0/0x1680 [ 574.497391] ? __schedule+0x1ed0/0x1ed0 [ 574.501386] ? kasan_check_read+0x11/0x20 [ 574.505552] ? do_raw_spin_unlock+0xa7/0x2f0 [ 574.509971] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 574.514598] ? __ww_mutex_add_waiter.part.15+0x120/0x120 [ 574.520066] ? mutex_destroy+0x200/0x200 [ 574.524163] ? do_raw_spin_lock+0xc1/0x200 [ 574.528412] schedule_preempt_disabled+0x10/0x20 [ 574.533193] __mutex_lock+0xbf5/0x1680 [ 574.537082] ? __do_sys_perf_event_open+0x18da/0x2f30 [ 574.542277] ? mutex_trylock+0x2b0/0x2b0 [ 574.546340] ? kasan_slab_alloc+0x12/0x20 [ 574.550494] ? kmem_cache_alloc+0x2fc/0x760 [ 574.554858] ? lock_downgrade+0x8f0/0x8f0 [ 574.559168] ? proc_nr_files+0x60/0x60 [ 574.563546] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 574.569117] ? errseq_sample+0xe5/0x130 [ 574.573095] ? _copy_to_user+0x110/0x110 [ 574.577181] ? kasan_check_write+0x14/0x20 [ 574.581415] ? kasan_check_write+0x14/0x20 [ 574.585668] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 574.590609] ? lock_acquire+0x1e4/0x540 [ 574.594607] ? rcu_read_unlock+0x37/0xb0 [ 574.598684] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 574.604257] ? atomic_fetch_add_unless+0x1e4/0x2c0 [ 574.609205] ? perf_mmap_open+0x230/0x230 [ 574.613480] ? get_unused_fd_flags+0x122/0x1a0 [ 574.618081] mutex_lock_nested+0x16/0x20 [ 574.622165] ? rcu_read_unlock+0x60/0xb0 [ 574.626252] ? mutex_lock_nested+0x16/0x20 [ 574.630503] __do_sys_perf_event_open+0x18da/0x2f30 [ 574.635529] ? perf_event_set_output+0x670/0x670 [ 574.640314] ? __kasan_slab_free+0x131/0x170 [ 574.644730] ? __x64_sys_futex+0x47f/0x6a0 [ 574.648971] ? do_futex+0x27d0/0x27d0 [ 574.652779] ? filp_open+0x80/0x80 [ 574.656334] ? exit_to_usermode_loop+0x1f4/0x380 [ 574.661092] ? syscall_slow_exit_work+0x500/0x500 [ 574.665975] __x64_sys_perf_event_open+0xbe/0x150 [ 574.670820] do_syscall_64+0x1b9/0x820 [ 574.674716] ? finish_task_switch+0x1d3/0x870 [ 574.679220] ? syscall_return_slowpath+0x5e0/0x5e0 [ 574.684171] ? syscall_return_slowpath+0x31d/0x5e0 [ 574.689114] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 574.694195] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 574.699071] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 574.704278] RIP: 0033:0x455a79 [ 574.707465] Code: 0f 0b e8 5a 44 fd ff 0f 0b e8 c3 44 fd ff 0f 0b e8 4c 44 fd ff 0f 0b e8 05 68 fd ff 48 8d 05 a4 9a 48 00 48 89 04 24 48 c7 44 <24> 08 1d 00 00 00 e8 8c 71 fd ff e8 37 6a fd ff 0f b6 44 24 2f 83 [ 574.726639] RSP: 002b:00007fddfaa0ec68 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 574.734360] RAX: ffffffffffffffda RBX: 00007fddfaa0f6d4 RCX: 0000000000455a79 [ 574.741653] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 00000000200000c0 [ 574.748927] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 574.756236] R10: 0000000000000013 R11: 0000000000000246 R12: 00000000ffffffff [ 574.763512] R13: 00000000004c07e5 R14: 00000000004d08c0 R15: 0000000000000000 [ 574.770808] INFO: task syz-executor2:26186 blocked for more than 140 seconds. [ 574.778166] Not tainted 4.18.0-rc4-next-20180712+ #6 [ 574.783799] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 574.791772] syz-executor2 D22624 26186 4481 0x80000002 [ 574.797426] Call Trace: [ 574.800043] __schedule+0x87c/0x1ed0 [ 574.803762] ? __sched_text_start+0x8/0x8 [ 574.807935] ? balance_dirty_pages_ratelimited+0x1f7/0x2200 [ 574.813663] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 574.819229] ? balance_dirty_pages+0x37b0/0x37b0 [ 574.824005] ? __generic_write_end+0x2a2/0x3f0 [ 574.828607] schedule+0xfb/0x450 [ 574.832157] ? __mutex_lock+0xbf0/0x1680 [ 574.836232] ? __schedule+0x1ed0/0x1ed0 [ 574.840249] ? kasan_check_read+0x11/0x20 [ 574.844441] ? do_raw_spin_unlock+0xa7/0x2f0 [ 574.848892] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 574.853487] ? __ww_mutex_add_waiter.part.15+0x120/0x120 [ 574.858956] ? mutex_destroy+0x200/0x200 [ 574.863055] ? do_raw_spin_lock+0xc1/0x200 [ 574.867338] schedule_preempt_disabled+0x10/0x20 [ 574.872112] __mutex_lock+0xbf5/0x1680 [ 574.876014] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 574.881077] ? iov_iter_advance+0x2ec/0x14e0 [ 574.885489] ? perf_event_ctx_lock_nested+0x375/0x600 [ 574.890779] ? mutex_trylock+0x2b0/0x2b0 [ 574.894847] ? iov_iter_npages+0xe80/0xe80 [ 574.899090] ? check_same_owner+0x340/0x340 [ 574.903441] ? trace_hardirqs_on+0x10/0x10 [ 574.907687] ? ext4_write_end+0x10f0/0x10f0 [ 574.912025] ? trace_hardirqs_on+0x10/0x10 [ 574.916262] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 574.921288] ? bpf_prog_kallsyms_find+0xde/0x4c0 [ 574.926062] ? trace_hardirqs_on+0x10/0x10 [ 574.930424] ? lock_downgrade+0x8f0/0x8f0 [ 574.934574] ? lock_release+0xa30/0xa30 [ 574.938561] ? lock_acquire+0x1e4/0x540 [ 574.942538] ? lock_downgrade+0x8f0/0x8f0 [ 574.946690] ? trace_hardirqs_on+0x10/0x10 [ 574.950955] ? lock_release+0xa30/0xa30 [ 574.955061] ? is_bpf_text_address+0xd7/0x170 [ 574.959570] ? kernel_text_address+0x79/0xf0 [ 574.963989] mutex_lock_nested+0x16/0x20 [ 574.968058] ? mutex_lock_nested+0x16/0x20 [ 574.972515] perf_event_ctx_lock_nested+0x375/0x600 [ 574.977539] ? __perf_cgroup_move+0x170/0x170 [ 574.982054] ? lock_release+0xa30/0xa30 [ 574.986032] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 574.991059] perf_event_release_kernel+0x242/0xfc0 [ 574.995994] ? put_event+0x60/0x60 [ 574.999552] ? trace_hardirqs_on+0x10/0x10 [ 575.003796] ? is_bpf_text_address+0xd7/0x170 [ 575.008305] ? kernel_text_address+0x79/0xf0 [ 575.012720] ? __kernel_text_address+0xd/0x40 [ 575.017233] ? unwind_get_return_address+0x61/0xa0 [ 575.022175] ? __save_stack_trace+0x8d/0xf0 [ 575.026512] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 575.033808] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 575.039369] ? locks_remove_file+0x3df/0x590 [ 575.043800] ? fcntl_setlk+0x1010/0x1010 [ 575.047874] ? do_group_exit+0x177/0x440 [ 575.051944] ? fsnotify_first_mark+0x350/0x350 [ 575.056537] ? fsnotify+0x14e0/0x14e0 [ 575.060350] ? rcu_note_context_switch+0x730/0x730 [ 575.065294] ? perf_event_release_kernel+0xfc0/0xfc0 [ 575.070407] perf_release+0x37/0x50 [ 575.074055] __fput+0x35d/0x930 [ 575.077452] ? fput+0x1a0/0x1a0 [ 575.080754] ? kasan_check_write+0x14/0x20 [ 575.085026] ? do_raw_spin_lock+0xc1/0x200 [ 575.089277] ____fput+0x15/0x20 [ 575.092566] task_work_run+0x1ec/0x2a0 [ 575.096654] ? task_work_cancel+0x250/0x250 [ 575.100995] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 575.106563] ? switch_task_namespaces+0xa2/0xd0 [ 575.111243] do_exit+0x1b08/0x2750 [ 575.114810] ? save_stack+0x43/0xd0 [ 575.118434] ? __kasan_slab_free+0x11a/0x170 [ 575.122868] ? __fput+0x4a1/0x930 [ 575.126357] ? mm_update_next_owner+0x9a0/0x9a0 [ 575.131168] ? do_signal+0x9c/0x21c0 [ 575.134930] ? exit_to_usermode_loop+0x2e5/0x380 [ 575.139711] ? do_syscall_64+0x6be/0x820 [ 575.143774] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 575.149153] ? do_raw_spin_unlock+0xa7/0x2f0 [ 575.153566] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 575.158169] ? kasan_check_write+0x14/0x20 [ 575.162415] ? do_raw_spin_lock+0xc1/0x200 [ 575.166670] ? trace_hardirqs_off+0xd/0x10 [ 575.170919] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 575.176040] ? trace_hardirqs_on+0x10/0x10 [ 575.180292] ? trace_hardirqs_off+0xd/0x10 [ 575.184536] ? quarantine_put+0x10d/0x1b0 [ 575.188692] ? trace_hardirqs_on+0x10/0x10 [ 575.192948] ? mntput_no_expire+0x7be/0xbc0 [ 575.197302] ? lock_downgrade+0x8f0/0x8f0 [ 575.201462] ? lock_downgrade+0x8f0/0x8f0 [ 575.205632] ? kasan_check_read+0x11/0x20 [ 575.209804] ? do_raw_spin_unlock+0xa7/0x2f0 [ 575.214220] ? cpumask_next+0x24/0x30 [ 575.218121] ? mnt_get_count+0xf4/0x150 [ 575.222112] ? _raw_spin_unlock+0x22/0x30 [ 575.226396] ? mntput_no_expire+0x18e/0xbc0 [ 575.230722] ? dentry_kill+0xce/0x5a0 [ 575.234536] ? mnt_get_count+0x150/0x150 [ 575.238603] ? dput.part.26+0x276/0x7a0 [ 575.242593] ? shrink_dcache_sb+0x350/0x350 [ 575.246921] ? memset+0x31/0x40 [ 575.250217] ? __dequeue_signal+0xf9/0x7d0 [ 575.254565] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 575.260116] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 575.265654] ? recalc_sigpending_tsk+0x180/0x180 [ 575.270424] ? get_signal+0x918/0x1970 [ 575.274312] ? lock_downgrade+0x8f0/0x8f0 [ 575.278470] ? do_raw_spin_lock+0xc1/0x200 [ 575.282719] do_group_exit+0x177/0x440 [ 575.286618] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 575.291244] ? __ia32_sys_exit+0x50/0x50 [ 575.295339] ? kasan_check_write+0x14/0x20 [ 575.299725] ? do_raw_spin_lock+0xc1/0x200 [ 575.303971] get_signal+0x88e/0x1970 [ 575.307691] ? ptrace_notify+0x130/0x130 [ 575.312042] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 575.317031] ? get_unused_fd_flags+0x1a0/0x1a0 [ 575.321637] ? wait_for_completion+0x8d0/0x8d0 [ 575.326224] ? lock_downgrade+0x8f0/0x8f0 [ 575.330388] ? task_work_add+0x123/0x1f0 [ 575.334456] ? cpumask_weight.constprop.5+0x3f/0x3f [ 575.339488] do_signal+0x9c/0x21c0 [ 575.343042] ? fd_install+0x4d/0x60 [ 575.346682] ? __do_sys_perf_event_open+0x7bb/0x2f30 [ 575.351787] ? setup_sigcontext+0x7d0/0x7d0 [ 575.356130] ? perf_event_set_output+0x670/0x670 [ 575.360889] ? __fget_light+0x2f7/0x440 [ 575.364962] ? lock_downgrade+0x8f0/0x8f0 [ 575.369114] ? finish_task_switch+0x18a/0x870 [ 575.373761] exit_to_usermode_loop+0x2e5/0x380 [ 575.378359] ? syscall_slow_exit_work+0x500/0x500 [ 575.383230] do_syscall_64+0x6be/0x820 [ 575.387120] ? finish_task_switch+0x1d3/0x870 [ 575.391639] ? syscall_return_slowpath+0x5e0/0x5e0 [ 575.396574] ? syscall_return_slowpath+0x31d/0x5e0 [ 575.401701] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 575.406726] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 575.411594] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 575.416799] RIP: 0033:0x455a79 [ 575.420017] Code: 0f 0b e8 5a 44 fd ff 0f 0b e8 c3 44 fd ff 0f 0b e8 4c 44 fd ff 0f 0b e8 05 68 fd ff 48 8d 05 a4 9a 48 00 48 89 04 24 48 c7 44 <24> 08 1d 00 00 00 e8 8c 71 fd ff e8 37 6a fd ff 0f b6 44 24 2f 83 [ 575.439454] RSP: 002b:00007fcccc789c68 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 575.447175] RAX: 0000000000000015 RBX: 00007fcccc78a6d4 RCX: 0000000000455a79 [ 575.454465] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 00000000200000c0 [ 575.461735] RBP: 000000000072c098 R08: 0000000000000000 R09: 0000000000000000 [ 575.469020] R10: 0000000000000013 R11: 0000000000000246 R12: 00000000ffffffff [ 575.476298] R13: 00000000004c07e5 R14: 00000000004d08c0 R15: 0000000000000003 [ 575.483590] INFO: lockdep is turned off. [ 575.487649] NMI backtrace for cpu 0 [ 575.491290] CPU: 0 PID: 900 Comm: khungtaskd Not tainted 4.18.0-rc4-next-20180712+ #6 [ 575.499253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 575.508590] Call Trace: [ 575.511169] dump_stack+0x1c9/0x2b4 [ 575.514790] ? dump_stack_print_info.cold.2+0x52/0x52 [ 575.519979] ? vprintk_default+0x28/0x30 [ 575.524026] ? lapic_can_unplug_cpu.cold.28+0x3f/0x3f [ 575.529198] nmi_cpu_backtrace.cold.3+0x48/0x88 [ 575.533864] ? lapic_can_unplug_cpu.cold.28+0x3f/0x3f [ 575.539040] nmi_trigger_cpumask_backtrace+0x151/0x192 [ 575.544326] arch_trigger_cpumask_backtrace+0x14/0x20 [ 575.549505] watchdog+0xb81/0x10f0 [ 575.553044] ? reset_hung_task_detector+0xd0/0xd0 [ 575.557872] ? find_held_lock+0x36/0x1c0 [ 575.561921] ? kasan_check_read+0x11/0x20 [ 575.566053] ? do_raw_spin_unlock+0xa7/0x2f0 [ 575.570444] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 575.575539] ? __kthread_parkme+0x58/0x1b0 [ 575.579770] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 575.584983] ? trace_hardirqs_on+0xd/0x10 [ 575.589131] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 575.594670] ? __kthread_parkme+0x106/0x1b0 [ 575.599167] kthread+0x345/0x410 [ 575.602538] ? reset_hung_task_detector+0xd0/0xd0 [ 575.607363] ? kthread_bind+0x40/0x40 [ 575.611153] ret_from_fork+0x3a/0x50 [ 575.614932] Sending NMI from CPU 0 to CPUs 1: [ 575.619473] NMI backtrace for cpu 1 skipped: idling at native_safe_halt+0x6/0x10 [ 575.620439] Kernel panic - not syncing: hung_task: blocked tasks [ 575.633188] CPU: 0 PID: 900 Comm: khungtaskd Not tainted 4.18.0-rc4-next-20180712+ #6 [ 575.641133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 575.650480] Call Trace: [ 575.653079] dump_stack+0x1c9/0x2b4 [ 575.656693] ? dump_stack_print_info.cold.2+0x52/0x52 [ 575.662046] ? printk_safe_log_store+0x2f0/0x2f0 [ 575.666796] panic+0x238/0x4e7 [ 575.669972] ? add_taint.cold.5+0x16/0x16 [ 575.674116] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 575.679645] ? nmi_trigger_cpumask_backtrace+0x13a/0x192 [ 575.685080] ? printk_safe_flush+0xd7/0x130 [ 575.689387] watchdog+0xb92/0x10f0 [ 575.693196] ? reset_hung_task_detector+0xd0/0xd0 [ 575.698167] ? find_held_lock+0x36/0x1c0 [ 575.702401] ? kasan_check_read+0x11/0x20 [ 575.706541] ? do_raw_spin_unlock+0xa7/0x2f0 [ 575.710937] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 575.716046] ? __kthread_parkme+0x58/0x1b0 [ 575.720297] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 575.725407] ? trace_hardirqs_on+0xd/0x10 [ 575.729717] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 575.735249] ? __kthread_parkme+0x106/0x1b0 [ 575.739561] kthread+0x345/0x410 [ 575.742912] ? reset_hung_task_detector+0xd0/0xd0 [ 575.749063] ? kthread_bind+0x40/0x40 [ 575.752860] ret_from_fork+0x3a/0x50 [ 575.756980] Dumping ftrace buffer: [ 575.760500] (ftrace buffer empty) [ 575.764214] Kernel Offset: disabled [ 575.767835] Rebooting in 86400 seconds..