[....] Starting enhanced syslogd: rsyslogd[ 14.282704] audit: type=1400 audit(1573800958.041:4): avc: denied { syslog } for pid=1926 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.107' (ECDSA) to the list of known hosts. 2019/11/15 06:56:09 fuzzer started 2019/11/15 06:56:11 dialing manager at 10.128.0.26:44567 2019/11/15 06:56:11 syscalls: 1354 2019/11/15 06:56:11 code coverage: enabled 2019/11/15 06:56:11 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/11/15 06:56:11 extra coverage: extra coverage is not supported by the kernel 2019/11/15 06:56:11 setuid sandbox: enabled 2019/11/15 06:56:11 namespace sandbox: enabled 2019/11/15 06:56:11 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/15 06:56:11 fault injection: kernel does not have systematic fault injection support 2019/11/15 06:56:11 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/15 06:56:11 net packet injection: enabled 2019/11/15 06:56:11 net device setup: enabled 2019/11/15 06:56:11 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/11/15 06:56:11 devlink PCI setup: PCI device 0000:00:10.0 is not available 06:56:30 executing program 0: 06:56:30 executing program 1: 06:56:30 executing program 5: 06:56:30 executing program 2: 06:56:30 executing program 3: 06:56:30 executing program 4: syzkaller login: [ 47.545306] audit: type=1400 audit(1573800991.301:5): avc: denied { create } for pid=2109 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 47.583142] audit: type=1400 audit(1573800991.341:6): avc: denied { write } for pid=2109 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 47.623502] audit: type=1400 audit(1573800991.381:7): avc: denied { read } for pid=2109 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:56:31 executing program 2: r0 = socket(0x10, 0x80000, 0x0) dup2(r0, r0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000280)={0x2000}) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RREMOVE(r1, &(0x7f0000000200)={0x10}, 0xffffff9a) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000200)={0x10}, 0xffffff9a) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x80) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x1) close(r4) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x1) close(r5) shutdown(r5, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) close(r7) write(r7, &(0x7f0000000380)="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", 0x1f) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x400000, 0x0) recvfrom$inet6(r6, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000340)={'\x1cCP\xc6\x000\x1c\xaaZ\xef\xe8)\x90\x00', 0x100}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r9 = accept4(r3, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000080), 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) socket(0x1, 0x2, 0x0) sendmmsg(r10, &(0x7f0000001480)=[{{&(0x7f0000000180)=@xdp, 0x80, 0x0}}], 0x400000000000210, 0x0) r11 = socket(0x2000000000000010, 0x1000040000000003, 0x0) write(r11, &(0x7f0000000000)="2200000014006701040000000000000402080313010000000800020041100ee376ab", 0x22) sendto$inet6(r9, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 06:56:31 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000240)=0x3, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000000)) 06:56:31 executing program 3: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) clone(0x2100001ff7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = gettid() tkill(r3, 0x3c) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r4, @ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x40}, 0x0) setpgid(r3, 0x0) 06:56:31 executing program 3: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf0a]}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) 06:56:31 executing program 0: r0 = socket(0x80000000000000a, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000e40)=[{{&(0x7f0000000100)={0x2, 0x5e21, @loopback}, 0x10, 0x0}}, {{&(0x7f0000000400)={0x2, 0x4e22, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x7ff, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x2, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) 06:56:31 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x10000) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x200004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040)='\x8fN\x13\xe0c/self\x00', 0x2d0a02, 0x0) write(r4, &(0x7f0000000100)="be61326772f4bc1615ba8649cd0a45a6c404d74211cffcfbbc870264909ef6713ab952fa5fb188bafb83401fd59abd95c81191803d684f8177d2a478a6a23b18be89bb991f3fc4d307737d308715193a26a56437e97765a8d571ea3ef26e688275e6ab239224b1478a104c82f77dde40ce55b0f7e950c8", 0x77) r5 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 06:56:32 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e20}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000319ff0)={0x2, 0x4e20}, 0x1) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x1) close(r3) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000040)={0xd9, 0x20, 0x1, 0x8, 0x9}, 0x14) r4 = dup3(r2, r1, 0x0) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2321202e2f66696c65300a433fb8f8e7d608e18a1e2b09d97230d28745ea9d91f9116de4988846f0c4f7ea69ed4b4114d69f07cb44c94cc6828ad44a5efe2b88aef68508e0d0eca4eddbb716423bac85a52d1f0000"], 0x45) io_setup(0x20, &(0x7f00000001c0)=0x0) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1) r7 = socket$packet(0x11, 0x2, 0x300) signalfd(r7, &(0x7f0000000200)={0x13e}, 0x8) close(r6) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x1) close(r8) setsockopt$inet6_icmp_ICMP_FILTER(r8, 0x1, 0x1, &(0x7f00000003c0)={0x7fff}, 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000000340)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) setsockopt$inet_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) io_submit(r5, 0x84, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) r9 = creat(&(0x7f0000000280)='./file0\x00', 0x1) close(r9) r10 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ashmem\x00', 0x8100, 0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000180)={0x20000000}) [ 48.210559] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. 06:56:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'sit0\x00\x00\x00\x00\x00\x00\x00\xd6\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'sit0\x00\x00\xff\xff\xff\xff\xa0\x00Q\xfc\x03\x00', 0x141}) socketpair$unix(0x1, 0x10000000003, 0x0, &(0x7f0000000040)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='timers\x00') r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) close(r1) openat(r1, &(0x7f0000000100)='./file0\x00', 0x18000, 0x20) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 06:56:32 executing program 5: ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000000)) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) close(r0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) close(r1) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000100)={0x3ff, 0x7, 0xd90}) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x1) close(r3) fcntl$setlease(r3, 0x400, 0x2) setpriority(0x2, 0x0, 0x7c) 06:56:32 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_mr_cache\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_score_adj\x00') sendfile(r1, r0, &(0x7f0000000000)=0x91, 0x125) 06:56:32 executing program 0: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000100)) fcntl$setstatus(r1, 0x4, 0x6100) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(0xffffffffffffffff, 0xe) write(r3, &(0x7f00000001c0), 0xfffffef3) setxattr$security_smack_entry(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='./cgroup.cpu\x00', 0xd, 0x0) read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0xff95) fsetxattr$security_smack_entry(r0, &(0x7f00000003c0)='security.SMACK64MMAP\x00', &(0x7f0000000400)='/proc/self/net/pfkey\x00', 0x15, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xf2) lseek(r1, 0x0, 0x2) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x7ff) sysinfo(&(0x7f0000000140)=""/32) sendfile(r1, r4, 0x0, 0x8000fffffffe) writev(r1, &(0x7f0000000680), 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700") getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000680)=0xc) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]) r5 = dup(0xffffffffffffffff) execveat(r5, &(0x7f0000000000)='\x00', &(0x7f00000001c0), 0x0, 0x1000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendfile(r1, r4, 0x0, 0xa5cc554) 06:56:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) close(r1) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000001c0)="5477278ab4713dfb654793716b21a6af9785963caff7bfb54e34783145333c96685e604612f3974341b1dfe89c762dc12556378e7490ce478e5c5e0aa009fde49147733343b4afdc993049c529418a5213079bdbf07796d2013f0cd2b31994b454ae22133f618161354a8c699e976d616846862f66ae8dbfafc5c3ed") bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r2 = open(0x0, 0x0, 0x8a) listen(r0, 0x80) flistxattr(r0, &(0x7f0000000a80)=""/114, 0x72) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x1) close(r4) ioctl$VT_GETMODE(r4, 0x5601, &(0x7f0000000180)) sendto$inet6(r3, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) getsockopt$sock_timeval(r2, 0x1, 0x62, &(0x7f0000000340), &(0x7f0000000380)=0x8) write$P9_RLERROR(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="19004ffa07080010006cb5bd9f16f8156fe2ef002400000000"], 0x19) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0xfffffffffffeffff}, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0xcc442, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x10000, 0x0, 0x0) setsockopt$packet_rx_ring(r5, 0x107, 0x5, 0x0, 0xfc64) write(r3, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r3, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000700)={'yam0\x00', {0x2, 0x4e23, @remote}}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r7 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r7, &(0x7f00000002c0)="2059ae6e6dbba3a79ffe", 0xfffffffffffffe56, 0x0, 0x0, 0x0) [ 48.470433] device sit0 entered promiscuous mode [ 48.491204] device sit0 left promiscuous mode [ 48.543161] device sit0 entered promiscuous mode [ 48.652741] audit: type=1326 audit(1573800992.411:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=2335 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45d49a code=0x0 06:56:32 executing program 4: write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x13, 0x2, {0x113, 0x0, 0x2}}, 0x14) r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb64a18c15eeb876aeb1cd06eaffff000093750500000000000000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c9351f367ca3b1b14ad897a91de591e36c4aacd4bf5b070000005e6b60"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) ioprio_set$uid(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000140)=0x8000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f00000000c0)=0x53) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 06:56:32 executing program 5: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000100), 0x0, 0x0, 0x8) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4080000000000016, &(0x7f00000004c0)={0x0, 0x0, 0xfffffffc}) ptrace(0x4206, r0) rt_tgsigqueueinfo(r0, r0, 0x12, &(0x7f0000001180)={0x0, 0x0, 0xffffbfffffffc58e}) wait4(0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, &(0x7f0000000000), 0xa, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x5d) futimesat(r2, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={{}, {0x0, 0x7530}}) close(r1) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fedbdf25010000000000000008410000004c001800010001696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x44014) 06:56:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'sit0\x00\x00\x00\x00\x00\x00\x00\xd6\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'sit0\x00\x00\xff\xff\xff\xff\xa0\x00Q\xfc\x03\x00', 0x141}) socketpair$unix(0x1, 0x10000000003, 0x0, &(0x7f0000000040)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='timers\x00') r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) close(r1) openat(r1, &(0x7f0000000100)='./file0\x00', 0x18000, 0x20) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 06:56:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) epoll_create1(0x0) r1 = epoll_create1(0x0) dup3(r1, r0, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) close(r2) r3 = socket$netlink(0x10, 0x3, 0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000440)) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x1) close(r4) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000140)={'nat\x00'}, &(0x7f0000000080)=0x54) socket(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1) close(r6) socket$packet(0x11, 0x3, 0x300) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x80000000, 0x420800) sendfile(r5, r6, 0x0, 0x2c) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) close(r7) ioctl$FIBMAP(r7, 0x1, &(0x7f0000000040)=0x401) tkill(0x0, 0x0) [ 48.956902] device sit0 left promiscuous mode [ 49.095945] device sit0 entered promiscuous mode 06:56:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'sit0\x00\x00\x00\x00\x00\x00\x00\xd6\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'sit0\x00\x00\xff\xff\xff\xff\xa0\x00Q\xfc\x03\x00', 0x141}) socketpair$unix(0x1, 0x10000000003, 0x0, &(0x7f0000000040)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='timers\x00') r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) close(r1) openat(r1, &(0x7f0000000100)='./file0\x00', 0x18000, 0x20) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) [ 49.191967] device sit0 left promiscuous mode [ 49.341684] device sit0 entered promiscuous mode 06:56:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'sit0\x00\x00\x00\x00\x00\x00\x00\xd6\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'sit0\x00\x00\xff\xff\xff\xff\xa0\x00Q\xfc\x03\x00', 0x141}) socketpair$unix(0x1, 0x10000000003, 0x0, &(0x7f0000000040)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='timers\x00') r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) close(r1) openat(r1, &(0x7f0000000100)='./file0\x00', 0x18000, 0x20) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 06:56:33 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') memfd_create(&(0x7f0000000300)='/dev/l\xc3op#\x00', 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x10) futimesat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0xc860e17cbf55624f, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000001240)) clock_gettime(0x0, &(0x7f00000064c0)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000006340)=[{{&(0x7f0000000340)=@alg, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000500)=""/219, 0xdb}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000000600)=""/243, 0xf3}, {&(0x7f0000000440)=""/77, 0x4d}, {&(0x7f0000000700)=""/161, 0xa1}], 0x5}, 0x3}, {{&(0x7f0000000840)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000c80)=[{&(0x7f00000008c0)=""/134, 0x86}, {&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/16, 0x10}, {&(0x7f0000000980)=""/179, 0xb3}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)=""/21, 0x15}, {&(0x7f0000000ac0)=""/65, 0x41}, {&(0x7f0000000b40)=""/145, 0x91}, {&(0x7f0000000c00)=""/99, 0x63}, {&(0x7f0000003ac0)=""/4096, 0x1000}], 0xa, &(0x7f0000000d40)=""/139, 0x8b}, 0xffffffff}, {{&(0x7f0000000e00)=@caif=@dgm, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000e80)=""/152, 0x98}], 0x1}, 0x7}, {{&(0x7f0000000f80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001000)=""/129, 0x81}, {&(0x7f00000010c0)=""/252, 0xfc}, {&(0x7f0000004ac0)=""/4096, 0x1000}, {&(0x7f0000001280)=""/178, 0xb2}, {&(0x7f00000011c0)=""/29, 0x1d}, {&(0x7f0000001340)=""/125, 0x7d}, {&(0x7f00000013c0)=""/131, 0x83}, {&(0x7f0000001200)=""/48, 0x30}], 0x8, &(0x7f0000001500)=""/204, 0xcc}, 0x5}, {{0x0, 0x0, &(0x7f0000005c80)=[{&(0x7f0000001600)=""/36, 0x24}, {&(0x7f0000001640)=""/41, 0x29}, {&(0x7f0000001680)=""/252, 0xfc}, {&(0x7f0000001780)=""/112, 0x70}, {&(0x7f0000001800)=""/177, 0xb1}, {&(0x7f0000002980)=""/216, 0xd8}, {&(0x7f0000005ac0)=""/242, 0xf2}, {&(0x7f0000005bc0)=""/177, 0xb1}, {&(0x7f00000018c0)=""/58, 0x3a}], 0x9, &(0x7f0000005d40)=""/239, 0xef}, 0x1}, {{&(0x7f0000005e40)=@l2, 0x80, &(0x7f00000062c0)=[{&(0x7f0000005ec0)=""/162, 0xa2}, {&(0x7f0000005f80)=""/201, 0xc9}, {&(0x7f0000006080)=""/92, 0x5c}, {&(0x7f0000006100)=""/111, 0x6f}, {&(0x7f0000006180)=""/169, 0xa9}, {&(0x7f0000006240)=""/124, 0x7c}], 0x6, &(0x7f0000001900)=""/15, 0xf}, 0x358}], 0x6, 0x0, &(0x7f0000002a80)={r3, r4+10000000}) setsockopt$sock_int(r2, 0x1, 0xf, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) socket(0x10, 0x400000000080803, 0x0) socket(0x10, 0x400000000080803, 0x0) socket$netlink(0x10, 0x3, 0x0) eventfd2(0x0, 0x0) syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() pipe2(&(0x7f0000000140), 0x0) pause() socket(0x10, 0x20000000003, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="04760f05"], 0x4}}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/checkreqprot\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r6}) 06:56:33 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'veth0\x00', 0x202}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000200)={@mcast1, 0x76, r3}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000003c0)={@local, 0x0, r3}) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x1) close(r4) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/s\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket(0x100000000011, 0x2, 0x85) bind(r8, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000140)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83950118, r9}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'erspan0\x00', r9}) sendmsg$TEAM_CMD_NOOP(r5, &(0x7f0000000e80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2400c000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000ac0)={0x1c0, r6, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x1a4, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x2c}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x8001, 0x77, 0x96, 0x81}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1000}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xf47d}}, {0x8}}}]}}]}, 0x1c0}}, 0x0) r11 = socket$inet6(0xa, 0x2, 0x0) r12 = socket(0x100000000011, 0x2, 0x0) bind(r12, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r12, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) ioctl$sock_inet6_SIOCADDRT(r11, 0x890b, &(0x7f0000000140)={@mcast1, @ipv4={[], [], @multicast1}, @ipv4={[], [], @local}, 0x0, 0x80, 0x0, 0x0, 0x8, 0x20381, r13}) r14 = socket$inet6(0xa, 0x2, 0x0) r15 = socket(0x100000000011, 0x2, 0x0) bind(r15, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r15, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) ioctl$sock_inet6_SIOCADDRT(r14, 0x890b, &(0x7f0000000140)={@mcast1, @ipv4={[], [], @multicast1}, @ipv4={[], [], @local}, 0x0, 0x80, 0x0, 0x0, 0x8, 0x20381, r16}) r17 = socket$inet6(0xa, 0x2, 0x0) r18 = socket(0x100000000011, 0x2, 0x0) bind(r18, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) pipe(&(0x7f0000001880)={0xffffffffffffffff}) getsockname$packet(r19, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0xda) ioctl$sock_inet6_SIOCADDRT(r17, 0x890b, &(0x7f0000000140)={@mcast1, @ipv4={[], [], @multicast1}, @ipv4={[], [], @local}, 0x0, 0x80, 0x0, 0x0, 0x8, 0x20381, r20}) r21 = creat(&(0x7f0000000280)='./file0\x00', 0x1) close(r21) recvmsg(r21, &(0x7f00000015c0)={&(0x7f0000000300)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000400)=""/158, 0x9e}, {&(0x7f00000004c0)=""/166, 0xa6}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x3, &(0x7f0000001580)=""/57, 0x39}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000001840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001800)={&(0x7f0000001600)={0x1c4, r6, 0x800, 0x70bd29, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x1a8, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r13}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x34, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x4}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r20}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r22}}}]}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x1}, 0x80) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@dev, r3}, 0x14) 06:56:33 executing program 4: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r3 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r4 = socket(0xa, 0x2, 0x6) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r5) r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r7 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r8, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f0000000000), 0x10000}]) r9 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x0) ftruncate(r9, 0x10099b7) r10 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r6, r10, 0x0, 0x8400fffffffb) creat(0x0, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r11, 0x400454cd, 0x7) dup3(r12, r11, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) [ 49.531689] device sit0 left promiscuous mode 06:56:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) close(r1) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000001c0)="5477278ab4713dfb654793716b21a6af9785963caff7bfb54e34783145333c96685e604612f3974341b1dfe89c762dc12556378e7490ce478e5c5e0aa009fde49147733343b4afdc993049c529418a5213079bdbf07796d2013f0cd2b31994b454ae22133f618161354a8c699e976d616846862f66ae8dbfafc5c3ed") bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r2 = open(0x0, 0x0, 0x8a) listen(r0, 0x80) flistxattr(r0, &(0x7f0000000a80)=""/114, 0x72) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x1) close(r4) ioctl$VT_GETMODE(r4, 0x5601, &(0x7f0000000180)) sendto$inet6(r3, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) getsockopt$sock_timeval(r2, 0x1, 0x62, &(0x7f0000000340), &(0x7f0000000380)=0x8) write$P9_RLERROR(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="19004ffa07080010006cb5bd9f16f8156fe2ef002400000000"], 0x19) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0xfffffffffffeffff}, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0xcc442, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x10000, 0x0, 0x0) setsockopt$packet_rx_ring(r5, 0x107, 0x5, 0x0, 0xfc64) write(r3, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r3, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000700)={'yam0\x00', {0x2, 0x4e23, @remote}}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r7 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r7, &(0x7f00000002c0)="2059ae6e6dbba3a79ffe", 0xfffffffffffffe56, 0x0, 0x0, 0x0) 06:56:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'sit0\x00\x00\x00\x00\x00\x00\x00\xd6\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'sit0\x00\x00\xff\xff\xff\xff\xa0\x00Q\xfc\x03\x00', 0x141}) socketpair$unix(0x1, 0x10000000003, 0x0, &(0x7f0000000040)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='timers\x00') r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) close(r1) openat(r1, &(0x7f0000000100)='./file0\x00', 0x18000, 0x20) pipe2(&(0x7f0000000140), 0x84800) [ 49.631229] device sit0 entered promiscuous mode [ 49.698231] device sit0 left promiscuous mode [ 49.804073] audit: type=1326 audit(1573800993.571:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=2396 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45d49a code=0x0 [ 49.883065] device sit0 entered promiscuous mode 06:56:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'sit0\x00\x00\x00\x00\x00\x00\x00\xd6\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'sit0\x00\x00\xff\xff\xff\xff\xa0\x00Q\xfc\x03\x00', 0x141}) socketpair$unix(0x1, 0x10000000003, 0x0, &(0x7f0000000040)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='timers\x00') r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) close(r1) openat(r1, &(0x7f0000000100)='./file0\x00', 0x18000, 0x20) [ 49.945253] device sit0 left promiscuous mode 06:56:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'sit0\x00\x00\x00\x00\x00\x00\x00\xd6\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'sit0\x00\x00\xff\xff\xff\xff\xa0\x00Q\xfc\x03\x00', 0x141}) socketpair$unix(0x1, 0x10000000003, 0x0, &(0x7f0000000040)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='timers\x00') r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) close(r1) [ 49.987035] device sit0 entered promiscuous mode [ 50.039198] device sit0 left promiscuous mode [ 50.133516] device sit0 entered promiscuous mode 06:56:36 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000440)=0x3f, 0x12) getpgid(0x0) write$FUSE_LK(r1, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000140)={@rand_addr="73d0226db513bdba574a6696ccda0a40", 0x9, 0x0, 0x0, 0xe, 0x0, 0x7fffffff}, &(0x7f0000000180)=0x20) socket(0xa, 0x800, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) fadvise64(r2, 0x0, 0x200, 0x7) r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001b40)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r6 = open(0x0, 0x0, 0x1c0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000740)=ANY=[@ANYBLOB="cc409948dbe75120e7c0c9a652c357177effff00000000c10a8f3a6980710203eec48efbd7ff284179f985740fdceff20dea464666e0648e9ae02514690636d083b161c24e68fc8a9b9112d40000", @ANYBLOB="2036c7ae852840b72e41020dcbf7545660f1680041636526ec9ee86edb16558064d1083fb034ea1c8286def836203c549c4a9840dd61bb952ea542c67806cea9f6c644cb51dd9be3900219f8f4f4a1da05807c12d8b8480c15dd9d9836f275dbb85973f9fca39f5d5133f5b50028cf2b7c1fe63948c442059526e333a06b12876c7be49361c7a81f92ad51c723b764f684a8ceedeaacf7015fef7b6c7c95c035f26a509c2cb6d47a270ca4d994da6cd594dac5850a85a44ff58a54444c85c1c7f8e0659863fcf7f4049e5bb4194be6626c155848ad3f80f7c3a8689ddda9a31100"/237], 0x2}}, 0x1) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="738b1000e50b6422a0b7690ec780c189bce00f3b720b325ef568cc353dd51005746a6c9ca102b45d3ce1ea6ad31a9f8ea5276162790179e089ff67dd331b5e57101664c74d84834b4504f8f65a3f06de7add1cc42e333a384520615a399a4776d1c818ed2bad0693db3424af8bab87b91bc522f58c62153704180cebf9520b521489dbf9b3705f75c3930e4afe8b625e499a7c2413829f4f9d3a67adec92774c3aa277fff20393b4f262d77df555d727"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x4000413) write$cgroup_type(r5, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000500)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r7, &(0x7f00000000c0)='./file1\x00') r8 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r5 = socket$unix(0x1, 0xe, 0x0) signalfd(r5, &(0x7f0000000000), 0x8) ftruncate(r4, 0x2007fff) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1) close(r6) r7 = openat$cgroup_subtree(r4, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x1) close(r8) r9 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000440)='/dev/keychord\x00', 0x0, 0x0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r9, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2019024}, 0xc, &(0x7f0000000600)={&(0x7f0000000880)=ANY=[@ANYBLOB="c8ae0400f9fa423afe9756c7ee9d0100000000000000d6eab39e7439aed639a84d38a4f4732c44479f0b9d117f341e75708812b38a854781ffb58b01b225eebd4bb27017e30a2b3f65a1b6caa7be8d04000000000000008e7a07164a4de92f5bb3d1de383bc4e67aa88c07ec3fdb8c0cd5b3c25dd988db9d413a7a2f22482df23be883f919c19e28fec7644ca2c75b1a6c1ae443db11cb338f970dee25c944f4c99c3b1a47", @ANYRES16=r10], 0x2}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$TIPC_NL_LINK_SET(r8, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2010400}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0xe4, r10, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x54, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0xb72f53aa228cca81}, 0x10000001) dup2(r6, r7) fallocate(r3, 0x3, 0x4, 0x8020003) [ 52.987656] device sit0 left promiscuous mode [ 53.048822] device sit0 entered promiscuous mode [ 53.061254] device sit0 entered promiscuous mode 06:56:37 executing program 5: getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0x3c3}, {&(0x7f0000000100)="0900000000003639408fa3a3ba27660199783b0a82f79b32a7c8225086600a38e07d4db8", 0x24}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0) fchdir(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r6 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ftruncate(r6, 0x208200) fcntl$setstatus(r5, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r8 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) readv(r8, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x3b6) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 06:56:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'sit0\x00\x00\x00\x00\x00\x00\x00\xd6\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'sit0\x00\x00\xff\xff\xff\xff\xa0\x00Q\xfc\x03\x00', 0x141}) socketpair$unix(0x1, 0x10000000003, 0x0, &(0x7f0000000040)) 06:56:37 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'sit0\x00\x00\x00\x00\x00\x00\x00\xd6\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'sit0\x00\x00\xff\xff\xff\xff\xa0\x00Q\xfc\x03\x00', 0x141}) socketpair$unix(0x1, 0x10000000003, 0x0, &(0x7f0000000040)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='timers\x00') r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) close(r1) openat(r1, &(0x7f0000000100)='./file0\x00', 0x18000, 0x20) pipe2(&(0x7f0000000140), 0x84800) 06:56:37 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r1, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr="16c6be34453934b9b4d4dc53278aa45a"}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000}, 0x1) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x100, 0x4310}, 0xc) 06:56:37 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x584acb706c3ab0e8, 0x50, r2, 0x862dd000) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(0xffffffffffffffff, r2, 0x0, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e504000000cd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 06:56:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x200, 0x0, 0xa}) syz_open_pts(r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) open(&(0x7f00000001c0)='./file0\x00', 0x101042, 0x0) pipe(&(0x7f0000000380)) socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) memfd_create(&(0x7f0000000300)='\x00'/11, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/load\x00', 0x2, 0x0) gettid() r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0xfffffffffffffff2, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) r3 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="41c321838cf7e5509618548871a84ffae7001f5ec479cfa03d52ed2a7e3472c9c1ca5f98186c726c35ea633c23a382faebed0a9a281a0fb25318960ea5b260d30953d01dcb1044a3927df731b0455c87b5094832ae7c0bb09ad19f3cb4a9072faa413def4b71cfb558baeed9b48a6e30174dd35b5782d655131cfd5e2e1cddd8e3ff3f9d020d99456e27740e75ca000bf5f72b4c72389f54f45467f01abbc9675d0da8dc5cd41155dc36d208d2a2e2178acfba3670a64f1f"], 0x5}}, 0x0) [ 53.441820] device sit0 left promiscuous mode [ 53.515995] device sit0 left promiscuous mode 06:56:37 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f0000000100)="d84f7398", 0x4) sendto$inet6(r0, &(0x7f0000000280)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca30e744391062c8e602721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ef42eeb66c3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a0e1d0607f57f626a5b8d476636ef1ee76307524009ae49be4db0ab2c8ea0c5ebd1e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408cc4c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dff02ba9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669c24c206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb25c89074fcb1bba20c41bddd9ca5cd2f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2ebdfad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea09364ab42ee9802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c5912a9e100225c7044114400a82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e218daa5a3ef64617beb30cccb31016b13ed8d7bcabb03e176b1c9bda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f24c71f496cfe9bc88fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97184339f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f400582bd95e5ad802050d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60be632697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792dff2695407ccdd6a7375e0007230fd3f6501c152f1c1ff279b1d67cc95f2820762b7927659368e41657bdef2dd15b63498a93b787bdb26809d734aaf98b86fcf9fc643a34d03ebbe072820662d20f4774d66c5ae0a0adade5b8f6242a059b926221ee3d677487471c432b0d6d64dad030703475bb3ecac39b204a814f5ece5961621358e36f8a2cf7196c76959824bbb475a7cad8f57853fe05f59f341b5b4967904daf833d91ae9461ef10036f8be000000", 0x5ad, 0x4, &(0x7f0000809000)={0xa, 0x4e1f, 0x0, @mcast2}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000000), &(0x7f00000000c0)=0x8) dup(r2) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r4, 0x0) ioctl$PIO_UNISCRNMAP(r4, 0x4b6a, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socket$key(0xf, 0x3, 0x2) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) truncate(0x0, 0x0) eventfd(0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) dup2(r1, r0) socket$inet(0x2, 0x0, 0x0) fchdir(0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$binfmt_script(r5, 0x0, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:56:37 executing program 2: r0 = socket$inet6(0xa, 0xfdcff843e8ed9564, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@local, @rand_addr="a589d307ceb8a22ccc8a8aafa275f0ed", @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x160016a}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfffffffc, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) r1 = gettid() r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) close(r2) r3 = dup(r2) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x100000000011, 0x2, 0x0) bind(r5, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) socket$inet6(0xa, 0x800, 0x7) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={@mcast1, @ipv4={[], [], @multicast1}, @ipv4={[], [], @local}, 0x0, 0x80, 0x0, 0x0, 0x8, 0x20381, r6}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={@ipv4={[], [], @rand_addr=0x400}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @mcast1, 0x8, 0x8001, 0xffff, 0x100, 0x4498, 0x100, r6}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000480)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000014) [ 53.616156] audit: type=1400 audit(1573800997.371:11): avc: denied { create } for pid=2532 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 06:56:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'sit0\x00\x00\x00\x00\x00\x00\x00\xd6\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'sit0\x00\x00\xff\xff\xff\xff\xa0\x00Q\xfc\x03\x00', 0x141}) 06:56:37 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'sit0\x00\x00\x00\x00\x00\x00\x00\xd6\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'sit0\x00\x00\xff\xff\xff\xff\xa0\x00Q\xfc\x03\x00', 0x141}) socketpair$unix(0x1, 0x10000000003, 0x0, &(0x7f0000000040)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='timers\x00') r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) close(r1) openat(r1, &(0x7f0000000100)='./file0\x00', 0x18000, 0x20) [ 53.673516] device sit0 entered promiscuous mode [ 53.682531] device sit0 entered promiscuous mode [ 53.752546] device sit0 left promiscuous mode 06:56:37 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x80, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r4 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x584acb706c3ab0e8, 0x50, r2, 0x862dd000) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000680)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(0xffffffffffffffff, r2, 0x0, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000340)=0xfffffffffffffd37) r8 = syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f0000000840)=""/59, 0x5875}) write(r2, &(0x7f0000000080)="124d4c9662ca9f18781d90bf3b8b517d2c26f1ae98b7fb96f1e1adc17b95281c8114", 0xfffffdd3) syz_open_procfs(r7, &(0x7f0000000640)='ne\x8e/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032cee2e68d908b1aa94a500fe8084000000000000008a526341000000463faf532ba4d3e56b8556359bae5177923d4c33da3279827119392d1182e504000000cd3f1600"/89], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x7, &(0x7f0000000180)=0x0) io_cancel(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f", 0x5f, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) [ 53.883772] device sit0 left promiscuous mode 06:56:37 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x5140, 0x28) r2 = fcntl$dupfd(r1, 0x203, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x46de2c3c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001400)='+pro\x00\x80\x00\x00l\'net/pFkey\x00', 0xf5c27c711e06e646, 0x0) [ 53.986020] device sit0 entered promiscuous mode [ 54.004045] device sit0 entered promiscuous mode [ 54.239504] ------------[ cut here ]------------ [ 54.251592] WARNING: CPU: 1 PID: 2567 at fs/ext4/inode.c:3327 ext4_direct_IO+0x226d/0x2a80() [ 54.262158] Kernel panic - not syncing: panic_on_warn set ... [ 54.262158] [ 54.269577] CPU: 1 PID: 2567 Comm: syz-executor.5 Not tainted 4.4.174+ #4 [ 54.276504] 0000000000000000 22969afc03b403c4 ffff8800b892f588 ffffffff81aad1a1 [ 54.284533] 0000000000000000 ffffffff82835ee0 ffffffff828bfa40 0000000000000cff [ 54.292546] ffffffff816417cd ffff8800b892f668 ffffffff813a48c2 0000000041b58ab3 [ 54.300546] Call Trace: [ 54.303126] [] dump_stack+0xc1/0x120 [ 54.308472] [] ? ext4_direct_IO+0x226d/0x2a80 [ 54.314594] [] panic+0x1b9/0x37b [ 54.319598] [] ? add_taint.cold+0x16/0x16 [ 54.325375] [] ? warn_slowpath_common.cold+0x5/0x20 [ 54.332028] [] warn_slowpath_common.cold+0x20/0x20 [ 54.338595] [] warn_slowpath_null+0x2a/0x30 [ 54.344543] [] ext4_direct_IO+0x226d/0x2a80 [ 54.350490] [] ? ext4_update_bh_state+0xf0/0xf0 [ 54.356782] [] ? ext4_end_io_dio+0xc0/0xc0 [ 54.362644] [] ? __filemap_fdatawrite_range+0x1b5/0x260 [ 54.369645] [] ? filemap_fdatawait_range+0x3d/0x50 [ 54.376198] [] generic_file_direct_write+0x276/0x4f0 [ 54.382928] [] ? filemap_write_and_wait_range+0xb0/0xb0 [ 54.389919] [] ? file_update_time+0xc1/0x3c0 [ 54.395955] [] ? mutex_trylock+0x500/0x500 [ 54.401812] [] __generic_file_write_iter+0x245/0x540 [ 54.408540] [] ext4_file_write_iter+0x9ec/0xc70 [ 54.414836] [] ? depot_save_stack+0x1c3/0x5f0 [ 54.420955] [] ? ext4_unwritten_wait+0x200/0x200 [ 54.427339] [] ? check_preemption_disabled+0x3c/0x200 [ 54.434163] [] ? check_preemption_disabled+0x3c/0x200 [ 54.440979] [] ? rcu_read_lock_sched_held+0x10b/0x130 [ 54.447796] [] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 54.454356] [] ? aio_run_iocb+0x682/0x6f0 [ 54.460138] [] aio_run_iocb+0x4ff/0x6f0 [ 54.465740] [] ? ext4_unwritten_wait+0x200/0x200 [ 54.472302] [] ? aio_complete+0xb90/0xb90 [ 54.478077] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 54.484806] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 54.491625] [] ? __might_fault+0x117/0x1d0 [ 54.497495] [] do_io_submit+0x639/0xf10 [ 54.503114] [] ? do_io_submit+0x2d2/0xf10 [ 54.508894] [] ? SyS_io_destroy+0x350/0x350 [ 54.514865] [] ? SyS_clock_gettime+0x118/0x1e0 [ 54.521083] [] ? SyS_clock_settime+0x220/0x220 [ 54.527294] [] ? do_sys_ftruncate.constprop.0+0x387/0x470 [ 54.534536] [] SyS_io_submit+0x28/0x30 [ 54.540073] [] entry_SYSCALL_64_fastpath+0x1e/0x9a [ 54.547222] Kernel Offset: disabled [ 54.550878] Rebooting in 86400 seconds..