[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 22.537923] random: sshd: uninitialized urandom read (32 bytes read, 34 bits of entropy available) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 25.256970] random: sshd: uninitialized urandom read (32 bytes read, 39 bits of entropy available) [ 25.613050] random: sshd: uninitialized urandom read (32 bytes read, 39 bits of entropy available) [ 26.587242] random: sshd: uninitialized urandom read (32 bytes read, 83 bits of entropy available) Warning: Permanently added '10.128.0.25' (ECDSA) to the list of known hosts. [ 32.378858] random: sshd: uninitialized urandom read (32 bytes read, 89 bits of entropy available) 2018/08/17 21:04:17 fuzzer started [ 33.921867] random: cc1: uninitialized urandom read (8 bytes read, 91 bits of entropy available) 2018/08/17 21:04:20 dialing manager at 10.128.0.26:38071 2018/08/17 21:04:22 syscalls: 1 2018/08/17 21:04:22 code coverage: enabled 2018/08/17 21:04:22 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/08/17 21:04:22 setuid sandbox: enabled 2018/08/17 21:04:22 namespace sandbox: enabled 2018/08/17 21:04:22 fault injection: CONFIG_FAULT_INJECTION is not enabled 2018/08/17 21:04:22 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/08/17 21:04:22 net packed injection: enabled 2018/08/17 21:04:22 net device setup: enabled [ 37.928624] random: nonblocking pool is initialized 21:05:01 executing program 0: getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000d80)={@dev, @local}, &(0x7f0000000d40)=0xc) r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/fib_trie\x00') sendfile(r0, r1, &(0x7f00000000c0), 0x80000002) 21:05:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000000)=@sco, &(0x7f0000000080)=0x80) fcntl$lock(r1, 0x7, &(0x7f00000000c0)={0x0, 0x2}) socketpair$unix(0x1, 0xfffffffffffffffd, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r5 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r5, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGNAME(r5, 0x80404506, &(0x7f0000000280)) ioctl$UFFDIO_WAKE(r4, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x258, 0x118, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000280), {[{{@uncond, 0xf0, 0x118}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0xffffffffffffd191}}}, {{@arp={@rand_addr, @multicast2, 0xff000000, 0xffffffff, @empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, @empty, {[0x0, 0x0, 0xff]}, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, '\x00', 'ip_vti0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@random="702a1b1c6294", @multicast2, @remote, 0xc}}}, {{@arp={@empty, @loopback, 0xffffffff, 0xffffffff, @mac=@random="7056f602d353", {[0xff, 0x0, 0x0, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}, 0x5, 0x7, 0x0, 0x3, 0x2, 0x3, 'bcsf0\x00', 'erspan0\x00', {0xff}, {}, 0x0, 0x80}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) dup2(r3, r2) recvmmsg(r2, &(0x7f0000004100), 0x3a9, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) 21:05:01 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmmsg(r0, &(0x7f0000003080)=[{{&(0x7f00000000c0)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000480), 0x0, &(0x7f0000000500)}}], 0x1, 0x0) 21:05:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000000a0002000000000000000000"], 0x1}}, 0x0) 21:05:01 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000080), &(0x7f0000000400)) 21:05:01 executing program 5: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) bind(r0, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001d6d7c980400000000f70dc136cb184a"}, 0x80) r1 = socket(0x1e, 0x5, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f00000001c0)="0a5cc80700315f85715070") sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000001000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 21:05:01 executing program 6: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x858, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xe78f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:05:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffffb) [ 76.272515] IPVS: Creating netns size=2552 id=1 [ 76.407039] IPVS: Creating netns size=2552 id=2 [ 76.486067] IPVS: Creating netns size=2552 id=3 [ 76.573267] IPVS: Creating netns size=2552 id=4 [ 76.702188] IPVS: Creating netns size=2552 id=5 [ 76.856640] IPVS: Creating netns size=2552 id=6 [ 77.127119] IPVS: Creating netns size=2552 id=7 [ 77.307382] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 77.386166] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 77.466374] IPVS: Creating netns size=2552 id=8 [ 77.550147] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 77.664274] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 77.955125] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 78.023864] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 78.062513] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 78.118720] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 78.226415] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 78.332299] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 78.351136] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 78.463485] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 78.480792] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 78.568949] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 78.607473] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 78.650296] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 78.662625] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 78.708366] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 78.793502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.825944] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 78.842009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.920177] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 78.932610] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 78.987212] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 78.999439] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 79.058412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.115941] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 79.132068] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 79.147818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.253245] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 79.336505] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 79.349250] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 79.440692] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 79.462320] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 79.490706] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 79.587619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.599533] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 79.616155] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 79.695631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.739745] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 79.842243] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 79.853865] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 79.879723] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 79.929728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.971296] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 79.992276] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 80.019065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.035836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.086382] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 80.103082] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 80.138134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.187463] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 80.305969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.389903] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 80.402283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.444271] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 80.539847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.566898] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 80.651971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.680656] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 81.052422] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 81.147993] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 81.261940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.374949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.790531] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 83.837116] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 84.081952] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 84.116149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.135811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.404046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.550455] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 84.659768] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 84.865298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.008261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.145368] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 85.257997] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 85.470401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.602104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.955788] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 86.189147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 21:05:11 executing program 5: socket$nl_xfrm(0xa, 0x3, 0x87) syz_emit_ethernet(0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000090780000"], &(0x7f0000000000)={0x0, 0x0, [0x0, 0x87a]}) 21:05:11 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0xff, 0x3}, 0x20) 21:05:11 executing program 5: r0 = socket(0x848000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x2711, &(0x7f0000af0fe7)=""/13, &(0x7f0000000000)=0x2e2) 21:05:11 executing program 1: syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x21, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 21:05:11 executing program 1: r0 = socket$inet6(0xa, 0x21000000000002, 0x0) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000000), 0x4) 21:05:11 executing program 5: r0 = socket(0x1e, 0x805, 0x0) r1 = socket(0x1e, 0x5, 0x0) listen(r1, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000}, 0x1c) accept4$packet(r1, &(0x7f0000000100), &(0x7f0000000180)=0x14, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda) sendmsg(r0, &(0x7f0000000140)={&(0x7f0000000080)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000340), 0x0, &(0x7f0000000300)=ANY=[]}, 0x0) [ 86.603063] sock: process `syz-executor1' is using obsolete setsockopt SO_BSDCOMPAT 21:05:11 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readlink(&(0x7f0000000040)='\x00', &(0x7f0000000080)=""/43, 0x2b) 21:05:11 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, &(0x7f0000000280)}}], 0x1, 0x0, &(0x7f0000003280)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f00000017c0), 0x1d0, 0x80efff7f) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)) [ 86.810754] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2618 sclass=netlink_route_socket [ 86.861459] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket [ 86.897411] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17225 sclass=netlink_route_socket 21:05:12 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80006, 0x0) recvmmsg(r0, &(0x7f0000002040)=[{{&(0x7f00000000c0)=@generic, 0x80, &(0x7f0000001840)=[{&(0x7f0000000380)=""/135, 0x87}], 0x1, &(0x7f00000018c0)=""/44, 0x2c}, 0x9}], 0x1, 0x0, 0x0) 21:05:12 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") unshare(0x40000) 21:05:12 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @remote, @remote}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f00000100000000010000000000"], 0x1) [ 87.318005] device lo entered promiscuous mode [ 87.337128] device lo left promiscuous mode [ 87.392375] device lo entered promiscuous mode 21:05:12 executing program 2: r0 = socket$inet6(0xa, 0x100000003, 0xff) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) 21:05:12 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000080), &(0x7f0000000400)) 21:05:12 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/protocols\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000040)="6f6f6d5f61646a00000026e7080900000000") perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000000), 0x79fffff8000000) 21:05:12 executing program 5: r0 = socket(0x100000010, 0x80803, 0x0) write(r0, &(0x7f00000002c0)="240000001a0025f00485bc04fef7001c0a0b49ffed000000800008000800100001000000", 0x24) 21:05:12 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80006, 0x0) recvmmsg(r0, &(0x7f0000002040)=[{{&(0x7f00000000c0)=@generic, 0x80, &(0x7f0000001840)=[{&(0x7f0000000380)=""/135, 0x87}], 0x1, &(0x7f00000018c0)=""/44, 0x2c}, 0x9}], 0x1, 0x0, 0x0) 21:05:12 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) syz_emit_ethernet(0x437, &(0x7f0000000700)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x401, 0x11, 0x0, @dev, @local, {[], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}, "2b00b32def4f1142b6793bb530f9b20e90aa25d5c2b9431efd840a07c1922833b2c789aefbbaee9f63cbab38a8acfb8dba0595ecb683e74ea2bc44a7aee9c52e18ca01c06a5c354712b8b1ff75f45ba55a3487c83849023d37e037d2d3e3e842e9ba099e9ed8775d1173d8e78335aa65d58f54c1d78d4fce897cfefa24b7f268f90be76c7f4e1bfe4d84a869353e931c3732afea55697618a1318ecb657b34172b93fd59d7988d43630cf81e976a0ea01fd8b2547ab593bc605c985f56664b84ed3c9f90ffb666e030c794e2d2d5070af38d83dc275da88cfe6910b2ded59f6c418af5d247237eceb14857c1d7c3ee32e729d9793040f8f4e432eb875a89fe31cbed117f0e76643797169fba3dac3f377d145ce97980ba626da7a279e698a9e040a22d63c535f0ee06adb59e9e06ad7295e6601f3a5fe9b581975993c6c775734212bccb26288d42a672c965d40e80d0e1908f04425a60a08241378ec7ff88315de073b64c5f9647e51732be34988e0948f12e6c560bedbece811bca501d4389dbfe20e4df5160cd7324c0670c7b3e8980b061e31b1c8461d6f7a63f9e9fd24326924c076e01631a0b9703a6106accfaa064075fa1f16e16c5171b6a324e8642b2ab76618b824110c312ab12d9f65d6a980634a6a7cba8bf89e01a91259f446232476a1c490982636b78d1300befab1a2f6e8261e07336c5692db37bb7d3cebf4a942b62f2fa6cceb7e488aa02b2e52c6f82bd3792845fff41cce52e0469d14821ce11491864860c11421a92dae3152eb23106a0c679d2b1f0a9809b56abdcf893f9531508f24e64ec911fd8e8b3c8fd2291f1a7b910222c38533d4caadac9acd194be7e53549c1719bdf668887a0e19db83b5356f8f7d93cbef1ef3505dcc40d0d2a02a2745ab518979b9c3774babfe8e70ead767c7a00289b8cc6e51d1a957548270cb3f5064961a88f61b34f9442d78ae5a8551713f9afb4269d689f9adb6b4a902a637184f7f899efe9fa0ddb45cd1076c4eeeda51ca8dc20dcfc9cc5f56768073b3f4c2c9f543324a4fd0b8bc7b95e232bf85bf222394fa4336ab4007d7ad2dc85afa6eb79ad2624c4be6c674ee98fce9a51786b7cc2b5044de114d36d2690e13bcedf96590c7d5aeb8040b74c4d6a5aa38a7c1f0857522f4f968795056b9a7034dc3444784f9486b575e44dec3216d72845500e63297d7197961e7e593ea3411001d1d47ba42d70e7af8e91246c02d7e37ff0eb60abebc37dd00315b4fbb09e77a6b5f7e8441818ebcfafecf622731f1db8a11fa2de8e30d808bedbfee104b3b1100f5094675521da07dd2a28be7e486b325a0f0e6d75116be1bbc2aa20deb64a6e4e7b824b12d009e6f1802f5a8e31559b125d71d00a5684fbde4668f5af1eb4ca04fa7c4ef4d2a194b0856e007"}}}}}}, &(0x7f0000001780)) 21:05:12 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @remote, @remote}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f00000100000000010000000000"], 0x1) 21:05:12 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x0, 0xff, 0x1}, 0x20) 21:05:12 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000100)="237d00d3fc1ee4675fbaa0a455e73e678b8e96f7fd829d4d39f1828ebf765e220913b73db94f6d495077a6df5ab82b4cbbeb", 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) ftruncate(r1, 0x40001) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x51657e6adbcbddc1}, 0xc) sendfile(r0, r1, &(0x7f0000000080), 0xffe4) 21:05:12 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, &(0x7f0000000280)}}], 0x1, 0x0, &(0x7f0000003280)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) 21:05:13 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001800190000003fffffffda0602000000fde80001024000040d000500000500000005000000", 0x29}], 0x1) 21:05:13 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x1ac4) [ 87.754695] device lo left promiscuous mode 21:05:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="240000005a0007031dfffd946fa283df8fc4390009000000069effff000000000d00ff7e", 0x24}], 0x1}, 0x0) 21:05:13 executing program 1: r0 = inotify_init() mkdir(&(0x7f0000000240)='./control\x00', 0x0) r1 = inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) clone(0x0, &(0x7f0000001540), &(0x7f0000001380), &(0x7f0000001600), &(0x7f0000001640)) inotify_rm_watch(r0, r1) 21:05:13 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000000, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) 21:05:13 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, &(0x7f0000000280)}}], 0x1, 0x0, &(0x7f0000003280)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) 21:05:13 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000000)="b63db85e1e8d020000feff00003ef0011dcc606aed5ed2bc7018cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 21:05:13 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r1) sched_setparam(0x0, &(0x7f0000000080)) 21:05:13 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0xa}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') sendfile(r0, r1, &(0x7f0000000080), 0x3412) 21:05:13 executing program 5: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000012"], 0x1) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000100)=@in6={0xa, 0x4e24, 0x800, @dev}, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000200)}, 0x0) 21:05:13 executing program 1: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4c24, @remote}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x5}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") sendmsg(r0, &(0x7f0000000200)={0x0, 0x214, &(0x7f0000000080)}, 0x0) 21:05:13 executing program 5: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000012"], 0x1) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000100)=@in6={0xa, 0x4e24, 0x800, @dev}, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000200)}, 0x0) 21:05:13 executing program 7: 21:05:13 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)="7965616800992ba5bd7a6b", 0xb) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) 21:05:13 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$P9_RGETATTR(r1, &(0x7f00000001c0)={0xa0}, 0xa0) close(r1) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140), &(0x7f0000000140)) 21:05:13 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x2}}, 0x0) 21:05:13 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, &(0x7f0000000280)}}], 0x1, 0x0, &(0x7f0000003280)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x80efff7f) 21:05:13 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='ip6gretap0\x00', 0xe) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0xf}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0x2, 0xf0ffff, 0x600}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f42361800000015739d53d5"]}, 0x48}}, 0x0) 21:05:13 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) pread64(r0, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 21:05:13 executing program 7: 21:05:13 executing program 1: 21:05:13 executing program 6: r0 = add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140), &(0x7f0000000400)='V', 0x1, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x103) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r2) keyctl$setperm(0x11, r0, 0x0) 21:05:13 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) inotify_init1(0x0) 21:05:13 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, &(0x7f00004b3fff), 0x1a000, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback}, 0x10) 21:05:13 executing program 7: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@random="c5d6877d2912", @remote, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @random="01433c8dcb22", @empty, @link_local, @local}}}}, &(0x7f0000000140)) 21:05:13 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='ip6gretap0\x00', 0xe) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0xf}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0x2, 0xf0ffff, 0x600}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f42361800000015739d53d5"]}, 0x48}}, 0x0) 21:05:13 executing program 7: 21:05:13 executing program 7: 21:05:13 executing program 1: 21:05:13 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='ip6gretap0\x00', 0xe) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0xf}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0x2, 0xf0ffff, 0x600}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f42361800000015739d53d5"]}, 0x48}}, 0x0) [ 88.419338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.451076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 21:05:13 executing program 2: 21:05:13 executing program 6: 21:05:13 executing program 1: 21:05:13 executing program 7: [ 88.474818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.487241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 21:05:13 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) pread64(r0, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 21:05:13 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, &(0x7f0000000280)}}], 0x1, 0x0, &(0x7f0000003280)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x80efff7f) 21:05:13 executing program 4: 21:05:13 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='ip6gretap0\x00', 0xe) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0xf}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0x2, 0xf0ffff, 0x600}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f42361800000015739d53d5"]}, 0x48}}, 0x0) 21:05:13 executing program 1: 21:05:13 executing program 7: 21:05:13 executing program 6: 21:05:13 executing program 2: 21:05:13 executing program 7: 21:05:13 executing program 6: 21:05:13 executing program 4: 21:05:13 executing program 0: socket$inet(0x2, 0x3, 0x6) r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0xf}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0x2, 0xf0ffff, 0x600}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f42361800000015739d53d5"]}, 0x48}}, 0x0) 21:05:13 executing program 2: 21:05:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x2e, 0x119, 0x70bd2d, 0x0, {0x5001}, [@nested={0x4}]}, 0x18}}, 0x0) 21:05:14 executing program 7: 21:05:14 executing program 6: 21:05:14 executing program 5: 21:05:14 executing program 2: 21:05:14 executing program 4: 21:05:14 executing program 6: 21:05:14 executing program 7: 21:05:14 executing program 1: 21:05:14 executing program 3: 21:05:14 executing program 0: socket$inet(0x2, 0x3, 0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0xf}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0x2, 0xf0ffff, 0x600}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f42361800000015739d53d5"]}, 0x48}}, 0x0) 21:05:14 executing program 4: 21:05:14 executing program 7: 21:05:14 executing program 3: 21:05:14 executing program 6: 21:05:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0xf}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0x2, 0xf0ffff, 0x600}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f42361800000015739d53d5"]}, 0x48}}, 0x0) 21:05:14 executing program 5: 21:05:14 executing program 1: 21:05:14 executing program 7: r0 = socket$inet6(0xa, 0x4000000000002, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000680)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000700)=0x80) accept4$packet(0xffffffffffffff9c, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000007c0)=0x14, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003800), 0x0, 0x0, &(0x7f00000038c0)={0x0, 0x1c9c380}) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x400000000000158, 0x0) 21:05:14 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='limits\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000280)=""/209}, {&(0x7f0000000380)=""/242}], 0x1000000000000184, 0x0) 21:05:14 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 21:05:14 executing program 1: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @dev}, 0x10) 21:05:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x803, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000340), 0xc, &(0x7f0000000cc0)={&(0x7f0000000e00)=ANY=[]}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={&(0x7f0000000080), 0x0, &(0x7f00000008c0)={&(0x7f0000000dc0)=@gettaction={0x18, 0x32, 0x5, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) 21:05:14 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="0a5cc80700315f85715070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000040), 0x12) 21:05:14 executing program 5: 21:05:14 executing program 2: 21:05:14 executing program 5: open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_default\x00') 21:05:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0xf}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0x2, 0xf0ffff, 0x600}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f42361800000015739d53d5"]}, 0x48}}, 0x0) 21:05:14 executing program 6: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000c85000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)={0x20, 0x18, 0x301, 0x0, 0x0, {0x1}, [@typed={0xc, 0x3, @u64}]}, 0x20}}, 0x0) [ 89.170680] device lo entered promiscuous mode 21:05:14 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000040)="6f6f6d5f61646a00000026e7080900000000") perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000000)=0x200000000000005d, 0x79fffff8000000) 21:05:14 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000030c0), 0x1000) read$FUSE(r0, &(0x7f0000001000), 0x1000) mount(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) lstat(&(0x7f0000000480)='./file0/file0\x00', &(0x7f00000005c0)) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='fuseblk\x00', 0x0, &(0x7f0000000640)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_DIRENT(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="9000000000000000020000000000000001009b00000000000000000b000000000066ce656d316e6f246576656d310000000000000000000000000000002c000000000000619fcd3823b7c94f5a3276ce8c9461000000000000001c000000020000002b7379737465746a48be3931486dcc6370757365746367726f7570246367726f0004000000000000000000000000"], 0x90) 21:05:14 executing program 3: request_key(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000140)='/dev/ptmx\x00', 0xffffffffffffffff) 21:05:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x407, 0x0, 0x0, {{@in=@loopback, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) 21:05:14 executing program 6: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/fib_trie\x00') sendfile(r0, r1, &(0x7f00000000c0), 0x80000002) [ 89.280277] device lo left promiscuous mode [ 89.287592] netlink: 48 bytes leftover after parsing attributes in process `syz-executor0'. [ 89.371788] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2618 sclass=netlink_route_socket [ 89.408499] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket 21:05:14 executing program 7: r0 = socket$inet6(0xa, 0x4000000000002, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000680)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000700)=0x80) accept4$packet(0xffffffffffffff9c, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000007c0)=0x14, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003800), 0x0, 0x0, &(0x7f00000038c0)={0x0, 0x1c9c380}) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x400000000000158, 0x0) 21:05:14 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000380)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x10008, 0x0, 0x0, 0xf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000180), &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000240)) 21:05:14 executing program 5: 21:05:14 executing program 2: 21:05:14 executing program 4: 21:05:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0xf}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0x2, 0xf0ffff, 0x600}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f42361800000015739d53d5"]}, 0x48}}, 0x0) 21:05:14 executing program 3: [ 89.434493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17225 sclass=netlink_route_socket [ 89.449086] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2618 sclass=netlink_route_socket [ 89.467972] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket 21:05:14 executing program 3: 21:05:14 executing program 5: 21:05:14 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local, @remote}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter\x00') preadv(r2, &(0x7f0000000100), 0x361, 0x10400003) 21:05:14 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=@ethtool_cmd={0x12, 0x0, 0x709000, 0x0, 0x0, 0x0, 0x2}}) [ 89.487686] netlink: 48 bytes leftover after parsing attributes in process `syz-executor0'. 21:05:14 executing program 5: 21:05:14 executing program 3: 21:05:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0xf}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0x2, 0xf0ffff, 0x600}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f42361800000015739d53d5"]}, 0x48}}, 0x0) 21:05:14 executing program 2: [ 89.564472] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17225 sclass=netlink_route_socket 21:05:14 executing program 5: [ 89.651306] netlink: 48 bytes leftover after parsing attributes in process `syz-executor0'. 21:05:15 executing program 7: 21:05:15 executing program 6: 21:05:15 executing program 1: 21:05:15 executing program 3: 21:05:15 executing program 2: 21:05:15 executing program 5: 21:05:15 executing program 0: socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0xf}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0x2, 0xf0ffff, 0x600}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f42361800000015739d53d5"]}, 0x48}}, 0x0) 21:05:15 executing program 4: 21:05:15 executing program 4: 21:05:15 executing program 5: 21:05:15 executing program 1: 21:05:15 executing program 6: 21:05:15 executing program 3: 21:05:15 executing program 2: 21:05:15 executing program 7: 21:05:15 executing program 6: 21:05:15 executing program 3: 21:05:15 executing program 1: 21:05:15 executing program 5: 21:05:15 executing program 2: 21:05:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0xf}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x48, 0x0, 0x7, 0x0, 0x0, {0x2, 0xf0ffff, 0x600}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f42361800000015739d53d5"]}, 0x48}}, 0x0) 21:05:15 executing program 6: 21:05:15 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, &(0x7f0000000280)}}], 0x1, 0x0, &(0x7f0000003280)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x80efff7f) 21:05:15 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x12) 21:05:15 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x407, 0x0, 0x0, {{@in=@loopback, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x42b5, 0xffffff9e}}}, 0xb8}}, 0x0) 21:05:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x4000) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000280)) 21:05:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") request_key(&(0x7f00000001c0)='big_key\x00', &(0x7f00000005c0), &(0x7f0000000580)="2f6465762f696e66696e6962616e032f72646d615f636d00", 0x0) 21:05:15 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) fdatasync(r0) 21:05:15 executing program 4: 21:05:15 executing program 6: [ 89.964169] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket 21:05:15 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000140), 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv4_newroute={0x2c, 0x18, 0xd19, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x2}, @RTA_ENCAP={0x8, 0x16, @nested={0x4}}]}, 0x2c}}, 0x0) 21:05:15 executing program 4: request_key(&(0x7f00000000c0)='logon\x00', &(0x7f0000000240), &(0x7f0000000040)='user!bdev=(}mime_type\x00', 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) clone(0x0, &(0x7f0000000440), &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)) 21:05:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x27, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffcf4, 0x10000000, &(0x7f0000000040)}) 21:05:15 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = memfd_create(&(0x7f00000002c0)='\x00', 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x15}}, 0xffffffffffffffcc) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@ipv4={[], [], @multicast2}}) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x186}) 21:05:15 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x5, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"0000000000000000000000000200", 0x5002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f0000000700)={@void, @void, @ipv6={0x0, 0x6, "8987f2", 0x44, 0x0, 0x0, @mcast1, @local, {[], @gre}}}, 0x6c) 21:05:15 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000f6bfe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000072f000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00001dc000/0x1000)=nil, 0x709000}, 0x8000}) 21:05:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0xf}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x48, 0x0, 0x7, 0x0, 0x0, {0x2, 0xf0ffff, 0x600}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f42361800000015739d53d5"]}, 0x48}}, 0x0) [ 90.133289] binder: 6471:6483 transaction failed 29189/-22, size 40-8 line 3014 [ 90.136260] BUG: unable to handle kernel paging request at ffffeafff91a0000 [ 90.136276] IP: [] copy_huge_pmd+0x235/0x710 [ 90.136280] PGD 0 [ 90.136290] Oops: 0000 [#1] PREEMPT SMP KASAN [ 90.136297] Dumping ftrace buffer: [ 90.136300] (ftrace buffer empty) [ 90.136311] Modules linked in: [ 90.136322] CPU: 0 PID: 6484 Comm: syz-executor4 Not tainted 4.4.149-gf76bdbd #82 [ 90.136328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 90.136333] task: ffff8801d9108000 task.stack: ffff8801cc988000 [ 90.136347] RIP: 0010:[] [] copy_huge_pmd+0x235/0x710 [ 90.136353] RSP: 0018:ffff8801cc98fa00 EFLAGS: 00010246 [ 90.136359] RAX: dffffc0000000000 RBX: ffffeafff91a0000 RCX: ffffc90002e7d000 [ 90.136364] RDX: 1ffffd5fff234000 RSI: ffffffff8150891f RDI: 00003ffe468001e0 [ 90.136370] RBP: ffff8801cc98fa70 R08: ffffffff8534e2b0 R09: 0000000000000000 [ 90.136375] R10: 0000000000000001 R11: ffff8801d9108000 R12: ffff8800adb02800 [ 90.136382] R13: ffff8801d2854000 R14: ffffea0000000000 R15: 00003ffe468001e0 [ 90.136389] FS: 00007fa38fad3700(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 [ 90.136395] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 90.136401] CR2: ffffeafff91a0000 CR3: 00000000b5810000 CR4: 00000000001606f0 [ 90.136406] Stack: [ 90.136419] 00003ffe468001e0 0000000000000080 ffff8800ac7a7200 ffff8800bb1fb8f0 [ 90.136430] ffff8801ce820c08 ffff8800ad520800 ffffea0002daf140 00000000d91088e0 [ 90.136440] 0000000020000000 ffff8800adb02800 ffff8800adb02800 dffffc0000000000 [ 90.136443] Call Trace: [ 90.136454] [] copy_page_range+0x721/0x1480 [ 90.136465] [] ? vma_gap_callbacks_rotate+0x62/0x80 [ 90.136473] [] ? __pmd_alloc+0x3e0/0x3e0 [ 90.136481] [] ? __vma_link_rb+0x226/0x320 [ 90.136491] [] copy_process+0x3f03/0x63f0 [ 90.136501] [] ? __cleanup_sighand+0x50/0x50 [ 90.136510] [] ? trace_hardirqs_on_thunk+0x17/0x19 [ 90.136521] [] _do_fork+0x146/0xe20 [ 90.136530] [] ? fork_idle+0x270/0x270 [ 90.136539] [] ? do_futex+0x17f0/0x17f0 [ 90.136547] [] ? mprotect_fixup+0x8d0/0x8d0 [ 90.136555] [] SyS_clone+0x37/0x50 [ 90.136566] [] entry_SYSCALL_64_fastpath+0x22/0x9e [ 90.136690] Code: e8 81 b7 e4 ff 48 23 5d 90 48 b8 00 00 00 00 00 fc ff df 48 c1 eb 06 4c 01 f3 48 89 da 48 c1 ea 03 80 3c 02 00 0f 85 3f 04 00 00 <48> 8b 03 f6 c4 40 0f 84 79 03 00 00 e8 4a b7 e4 ff 48 8d 7b 20 [ 90.136700] RIP [] copy_huge_pmd+0x235/0x710 [ 90.136704] RSP [ 90.136707] CR2: ffffeafff91a0000 [ 90.136714] ---[ end trace ffb59374dc59b83f ]--- [ 90.136718] Kernel panic - not syncing: Fatal exception [ 90.141037] Dumping ftrace buffer: [ 90.141040] (ftrace buffer empty) [ 90.141043] Kernel Offset: disabled [ 90.421739] Rebooting in 86400 seconds..