[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 12.793556] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 19.740794] random: sshd: uninitialized urandom read (32 bytes read) [ 20.068584] random: sshd: uninitialized urandom read (32 bytes read) [ 20.735772] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.29' (ECDSA) to the list of known hosts. [ 26.288021] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/26 04:20:16 fuzzer started [ 27.447734] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/26 04:20:18 dialing manager at 10.128.0.26:40967 2018/08/26 04:20:23 syscalls: 1 2018/08/26 04:20:23 code coverage: enabled 2018/08/26 04:20:23 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/08/26 04:20:23 setuid sandbox: enabled 2018/08/26 04:20:23 namespace sandbox: enabled 2018/08/26 04:20:23 fault injection: CONFIG_FAULT_INJECTION is not enabled 2018/08/26 04:20:23 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/08/26 04:20:23 net packed injection: enabled 2018/08/26 04:20:23 net device setup: enabled [ 39.405237] random: crng init done INIT: Id "6" respawning too fast: disabled for 5 minutes INIT: Id "4" respawning too fast: disabled for 5 minutes INIT: Id "2" respawning too fast: disabled for 5 minutes INIT: Id "5" respawning too fast: disabled for 5 minutes INIT: Id "1" respawning too fast: disabled for 5 minutes INIT: Id "3" respawning too fast: disabled for 5 minutes 04:21:52 executing program 0: r0 = socket(0x2000000010, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f00000001c0), 0xc, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB="14000a0b000000000069432e3000000009000000"], 0x1}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000640)={&(0x7f0000000040), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@NDA_DST_MAC={0xc, 0x1, @local}]}, 0x28}}, 0x0) 04:21:52 executing program 1: prctl$seccomp(0x59616d61, 0x0, &(0x7f00000000c0)) 04:21:52 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020a170007000000000013002d54036205001a00000ce600001000e0c900020000f8ff00000000000000000000000700fdff000b40000110"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x1d, 0x0) 04:21:52 executing program 2: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x6, @multicast2, 0x0, 0x0, 'wrr\x00', 0x0, 0xb7, 0x5f}, 0x2c) 04:21:52 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000e05000)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x4, 0x4}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xc0}}, 0x0) 04:21:52 executing program 4: r0 = eventfd(0x0) fcntl$getflags(0xffffffffffffffff, 0x401) fstatfs(r0, &(0x7f00000002c0)=""/47) 04:21:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000002440)=""/4096, 0x1000}, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f0000000140)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r3, &(0x7f0000000900)=[{&(0x7f00000009c0)="1f", 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) getpgrp(0xffffffffffffffff) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") socket$inet6(0xa, 0x1000000000002, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r6, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_udp_int(r5, 0x11, 0x65, &(0x7f0000000040)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0) 04:21:52 executing program 6: pipe2(&(0x7f0000000040), 0x4000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x5, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000063fc900000000000000050000008c01000000000065750ede825e45a90f1c09876e6d0cd4e191a1f98937702d8f9523b12ed909205c7333bb937dee28d4b2921ea4c8fa86a915932f764b26916a0dc38b518cdf4dba35cebb98b7559414d05501b53517cdf5426294335b7189c3003b2cbdae69c720e6ff0000000000710e13"], 0x82) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x20000000000000}) [ 122.441479] IPVS: Creating netns size=2536 id=1 [ 122.519303] IPVS: Creating netns size=2536 id=2 [ 122.586185] IPVS: Creating netns size=2536 id=3 [ 122.651945] IPVS: Creating netns size=2536 id=4 [ 122.705829] IPVS: Creating netns size=2536 id=5 [ 122.773728] IPVS: Creating netns size=2536 id=6 [ 122.841724] IPVS: Creating netns size=2536 id=7 [ 122.894928] IPVS: Creating netns size=2536 id=8 [ 123.450052] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 123.464742] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 123.505823] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 123.520142] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 123.540211] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 123.613688] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 123.708800] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 123.778137] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 123.802645] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 123.858135] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 123.889980] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 123.911935] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 123.952802] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 123.972627] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 123.980120] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 123.996903] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 124.028662] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 124.060049] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 124.071829] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 124.128717] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 124.139987] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 124.219006] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 124.227910] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 124.238950] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 124.302101] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 124.312946] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 124.324904] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 124.361544] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 124.393963] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 124.403095] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 124.411384] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 124.432299] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 124.451437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.459647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 124.475551] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 124.491766] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 124.499450] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 124.513633] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 124.524999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.533417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 124.541476] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 124.562345] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 124.575401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.584463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 124.603536] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 124.618609] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 124.643722] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 124.677283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.684828] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 124.692619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.700041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 124.708362] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 124.726335] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 124.739363] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 124.749624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.763035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 124.782765] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 124.798381] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 124.809743] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 124.824388] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 124.849901] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.858739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 124.879261] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 124.899031] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 124.921491] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.929006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 124.954571] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 124.974028] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 124.982884] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.990888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.010939] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 125.021538] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 125.033910] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.057944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.081554] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 125.089157] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 125.135462] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 125.154680] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 125.172637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.182918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.204565] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 125.214471] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 125.226733] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 125.238624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.247907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.260910] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.268315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.283551] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 125.299174] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 125.314710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.328929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.338226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.345942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.364922] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 125.376167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.399253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 129.098972] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 129.159724] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 129.200877] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 129.363623] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 129.377423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 129.387704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.403805] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 129.416179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 129.426039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.454503] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 129.463178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 129.471242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.518463] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 129.539447] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 129.612954] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 129.730097] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 129.745411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 129.753196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.761858] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 129.772425] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 129.783643] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 129.790679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 129.797428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.871309] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 129.887213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 129.895727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.980732] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 129.988556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 130.000597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 130.015621] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 130.036610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 130.067133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 04:22:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f0000000040), 0xc, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="00000000000000001c0012001000010069703665727370616e0000000800020004001200"], 0x1}}, 0x0) 04:22:01 executing program 7: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000000100)=""/72, 0x48, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) getdents64(r1, &(0x7f00000000c0)=""/11, 0xeb) 04:22:01 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000b00)={0x0, {}, {0x2, 0x0, @loopback}, {0x2, 0x0, @multicast1}, 0x0, 0x0, 0x487, 0x0, 0x0, &(0x7f0000000300)='veth1_to_bridge\x00'}) 04:22:01 executing program 1: pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 04:22:01 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000640)="2400000002021f001cfffd946fa283005b580a0009000b0009000000010015000404ff7e", 0x24}], 0x1}, 0x0) [ 131.195903] hrtimer: interrupt took 17831 ns [ 131.235280] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. 04:22:01 executing program 0: syz_emit_ethernet(0xfdef, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x8, 0x8, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000080)) [ 131.277294] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. 04:22:01 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="dd36060000000000000000ac10e3e279f480"], 0x12) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="dd3615000000000000000000b5da852b36"], 0x11) sendfile(r2, r2, &(0x7f00000000c0), 0xfff) sendfile(r1, r2, &(0x7f0000000140), 0x8fff) 04:22:01 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) 04:22:02 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_score_adj\x00') sendfile(r0, r1, &(0x7f0000000840), 0x80000001) 04:22:02 executing program 2: 04:22:02 executing program 2: 04:22:02 executing program 2: 04:22:02 executing program 3: pipe2(&(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x5, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000063fc900000000000000050000008c01000000000065750ede825e45a90f1c09876e6d0cd4e191a1f98937702d8f9523b12ed909205c7333bb937dee28d4b2921ea4c8fa86a915932f764b26916a0dc38b518cdf4dba35cebb98b7559414d05501b53517cdf5426294335b7189c3003b2cbdae69c720e6ff0000000000710e13"], 0x82) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)) 04:22:02 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f00000000c0)) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x109101, 0x0) write$P9_RVERSION(r0, &(0x7f00000003c0)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) 04:22:03 executing program 5: 04:22:03 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0x40085112, &(0x7f0000000040)={{0xffffff94}, {}, 0x0, 0x0, 0x20}) close(r0) 04:22:03 executing program 7: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x44840, 0x0) 04:22:03 executing program 6: pipe2(&(0x7f0000000040), 0x4000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x5, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000063fc900000000000000050000008c01000000000065750ede825e45a90f1c09876e6d0cd4e191a1f98937702d8f9523b12ed909205c7333bb937dee28d4b2921ea4c8fa86a915932f764b26916a0dc38b518cdf4dba35cebb98b7559414d05501b53517cdf5426294335b7189c3003b2cbdae69c720e6ff0000000000710e13"], 0x82) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x20000000000000}) 04:22:03 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000182000)={&(0x7f00000002c0)={0x2, 0x4000000000000d, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast1}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}}]}, 0x80}}, 0x0) 04:22:03 executing program 3: 04:22:03 executing program 0: 04:22:03 executing program 1: 04:22:03 executing program 1: 04:22:03 executing program 3: 04:22:03 executing program 5: 04:22:03 executing program 7: 04:22:03 executing program 1: 04:22:03 executing program 0: 04:22:03 executing program 0: 04:22:03 executing program 4: 04:22:03 executing program 1: 04:22:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f00000001c0)=0x4000000000000004) recvfrom$inet6(r0, &(0x7f0000000100)=""/72, 0x48, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x6, @mcast1, 0x9}, 0x1c) getdents64(r1, &(0x7f00000000c0)=""/11, 0xeb) 04:22:03 executing program 5: 04:22:03 executing program 6: pipe2(&(0x7f0000000040), 0x4000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x5, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000063fc900000000000000050000008c01000000000065750ede825e45a90f1c09876e6d0cd4e191a1f98937702d8f9523b12ed909205c7333bb937dee28d4b2921ea4c8fa86a915932f764b26916a0dc38b518cdf4dba35cebb98b7559414d05501b53517cdf5426294335b7189c3003b2cbdae69c720e6ff0000000000710e13"], 0x82) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x20000000000000}) 04:22:03 executing program 3: 04:22:03 executing program 7: 04:22:03 executing program 0: mlock2(&(0x7f0000076000/0x2000)=nil, 0x2000, 0x1) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x857, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x8b000)=nil, 0x8b000, 0x0, 0x10000032, 0xffffffffffffffff, 0x0) 04:22:03 executing program 4: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$selinux_create(0xffffffffffffffff, &(0x7f0000000b80)=ANY=[], 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x1, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = creat(&(0x7f0000001380)='./file0\x00', 0x0) r8 = creat(&(0x7f0000000100)='./file0\x00', 0x0) epoll_ctl$EPOLL_CTL_DEL(r8, 0x2, r3) write$cgroup_type(r8, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) fallocate(r7, 0x3, 0x0, 0xfffe) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) dup2(r5, r7) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) 04:22:03 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/209, 0xd1}], 0x1, 0x100) 04:22:03 executing program 5: r0 = socket$inet6(0xa, 0x202000000802, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00') r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") sendfile(r0, r1, &(0x7f0000000340)=0x201, 0x7ffffffe) 04:22:03 executing program 7: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000840), 0x80000001) 04:22:03 executing program 3: 04:22:03 executing program 0: 04:22:03 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, &(0x7f0000000000)) 04:22:03 executing program 1: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000840)=0x68, 0x80000001) 04:22:03 executing program 5: mkdir(&(0x7f0000000140)='./control\x00', 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) creat(&(0x7f0000000100)='./file0/file0\x00', 0x0) rename(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000180)='./control/file0\x00') 04:22:03 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000001c0)=@req={0x80000001}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000002700ffff00004bb60000000010000000"], 0x1}}, 0x0) 04:22:03 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000300)=0x6, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x178, 0x4) sendto$inet6(r0, &(0x7f0000adb000), 0x0, 0x0, &(0x7f0000809000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvfrom$inet6(r0, &(0x7f0000000080)=""/49, 0x31, 0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x70c000) 04:22:03 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x202000000802, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='sessionid\x00') sendfile(r0, r1, &(0x7f0000000340)=0x201, 0x7ffffffe) 04:22:03 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) 04:22:03 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x800044, &(0x7f0000000240)=ANY=[]) 04:22:03 executing program 7: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x800044, &(0x7f0000000240)=ANY=[]) 04:22:03 executing program 5: r0 = socket$inet6(0xa, 0x202000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@mcast1, 0x0, 0x0, 0x2, 0x80000000000041}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x0, 0x0, 0x3, 0x1}, 0x20) 04:22:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f00000001c0)=0x4000000000000004) recvfrom$inet6(r0, &(0x7f0000000100)=""/72, 0x48, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x6, @mcast1, 0x9}, 0x1c) getdents64(r1, &(0x7f00000000c0)=""/11, 0xeb) 04:22:03 executing program 6: pipe2(&(0x7f0000000040), 0x4000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x5, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000063fc900000000000000050000008c01000000000065750ede825e45a90f1c09876e6d0cd4e191a1f98937702d8f9523b12ed909205c7333bb937dee28d4b2921ea4c8fa86a915932f764b26916a0dc38b518cdf4dba35cebb98b7559414d05501b53517cdf5426294335b7189c3003b2cbdae69c720e6ff0000000000710e13"], 0x82) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x20000000000000}) 04:22:03 executing program 5: r0 = socket(0x2000000010, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f00000001c0), 0xc, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[]}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000640)={&(0x7f0000000040), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@NDA_DST_MAC={0xc, 0x1, @local}]}, 0x28}}, 0x0) 04:22:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_ADDRESS={0xc, 0x1, @local}]}, 0x2c}}, 0x0) [ 133.152229] FAT-fs (loop7): bogus number of reserved sectors [ 133.165659] FAT-fs (loop4): bogus number of reserved sectors 04:22:03 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000e05000)=ANY=[@ANYBLOB="020d00001800000000000000000000000400040000a40000000000000000000000000000000000000000000000000000080012000000030000000000000000000600000000000000000000000000000000000000000000000000000000000000ff02000000000000000000000000000105000500000000000a0000000000000000000000000000000000ffffac141400000000000000000005000600000000000a00000000000000fe8000000000000000000000000000ff0000000000000000"], 0xc0}}, 0x0) 04:22:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000002700ffff00004bb60000000010000000"], 0x1}}, 0x0) 04:22:03 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xfde1, 0x0, 0x0, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x8, 0x8, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000080)) [ 133.165664] FAT-fs (loop4): Can't find a valid FAT filesystem 04:22:03 executing program 6: pipe2(&(0x7f0000000040), 0x4000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x5, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000063fc900000000000000050000008c01000000000065750ede825e45a90f1c09876e6d0cd4e191a1f98937702d8f9523b12ed909205c7333bb937dee28d4b2921ea4c8fa86a915932f764b26916a0dc38b518cdf4dba35cebb98b7559414d05501b53517cdf5426294335b7189c3003b2cbdae69c720e6ff0000000000710e13"], 0x82) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x20000000000000}) 04:22:03 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000240)=""/79, 0x4a) 04:22:03 executing program 5: 04:22:03 executing program 0: 04:22:03 executing program 4: [ 133.225413] FAT-fs (loop4): bogus number of reserved sectors [ 133.225420] FAT-fs (loop4): Can't find a valid FAT filesystem 04:22:03 executing program 1: 04:22:03 executing program 5: [ 133.359783] FAT-fs (loop7): Can't find a valid FAT filesystem 04:22:04 executing program 7: 04:22:04 executing program 6: pipe2(&(0x7f0000000040), 0x4000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x5, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000063fc900000000000000050000008c01000000000065750ede825e45a90f1c09876e6d0cd4e191a1f98937702d8f9523b12ed909205c7333bb937dee28d4b2921ea4c8fa86a915932f764b26916a0dc38b518cdf4dba35cebb98b7559414d05501b53517cdf5426294335b7189c3003b2cbdae69c720e6ff0000000000710e13"], 0x82) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x20000000000000}) [ 133.435632] FAT-fs (loop7): bogus number of reserved sectors [ 133.442333] FAT-fs (loop7): Can't find a valid FAT filesystem 04:22:04 executing program 2: 04:22:04 executing program 0: 04:22:04 executing program 1: 04:22:04 executing program 4: r0 = socket$inet6(0xa, 0x202000000802, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f0000000340)=0x201, 0x7ffffffe) 04:22:04 executing program 5: 04:22:04 executing program 3: 04:22:04 executing program 7: 04:22:04 executing program 6: pipe2(&(0x7f0000000040), 0x4000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x20000000000000}) 04:22:04 executing program 5: 04:22:04 executing program 1: 04:22:04 executing program 7: 04:22:04 executing program 2: 04:22:04 executing program 7: 04:22:04 executing program 4: 04:22:04 executing program 5: 04:22:04 executing program 1: 04:22:04 executing program 6: pipe2(&(0x7f0000000040), 0x4000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x20000000000000}) 04:22:04 executing program 0: 04:22:04 executing program 3: 04:22:04 executing program 5: 04:22:04 executing program 4: syz_emit_ethernet(0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6050a0bc00080000fe8000000000000000000000000000bbfe60ac0349"], &(0x7f0000000040)) r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000000c0)=[{}, {}, {0x0, 0x4}], 0x3) setsockopt$inet_int(r0, 0x0, 0x40, &(0x7f0000000080), 0x0) 04:22:04 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r1, &(0x7f0000005fc0), 0x80000000000006a, 0x0) 04:22:04 executing program 5: r0 = eventfd(0x80000002) gettid() r1 = dup2(r0, r0) write$P9_RWRITE(r1, &(0x7f0000000140)={0xb}, 0xb) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/118, 0x76}], 0x1) 04:22:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2800, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) read(r0, &(0x7f00000002c0)=""/82, 0x52) 04:22:04 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2, 0x80000000000041}, 0x20) 04:22:04 executing program 1: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001d6d7c980400000000f70dc136cb184a"}, 0x80) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 04:22:04 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x202000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x1000000800, 0x0, 0x3, 0x1}, 0x20) 04:22:04 executing program 6: pipe2(&(0x7f0000000040), 0x4000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x20000000000000}) [ 133.880253] kasan: CONFIG_KASAN_INLINE enabled [ 133.884978] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 133.892432] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 133.898665] Dumping ftrace buffer: [ 133.902199] (ftrace buffer empty) [ 133.905904] Modules linked in: [ 133.909237] CPU: 0 PID: 7141 Comm: syz-executor0 Not tainted 4.9.124-g09eb2ba #31 [ 133.916850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 133.926203] task: ffff8801d0833000 task.stack: ffff8801d71c8000 [ 133.932248] RIP: 0010:[] [] ip6_xmit+0xb2d/0x1b80 [ 133.940429] RSP: 0018:ffff8801d71cf5e0 EFLAGS: 00010246 [ 133.945870] RAX: dffffc0000000000 RBX: ffff8801cd37ca00 RCX: ffffc900008b6000 [ 133.953136] RDX: ffff8801cd37ca78 RSI: ffffffff83561613 RDI: ffff8801d693a518 [ 133.960399] RBP: ffff8801d71cf7f8 R08: ffffed003ae39ef2 R09: ffff8801d71cf750 [ 133.967664] R10: ffffed003ae39ef1 R11: 0000000000000003 R12: ffff8801cddbb600 [ 133.974940] R13: ffff8801bb4b3ae6 R14: 000000000000001b R15: 0000000000000040 [ 133.982209] FS: 00007f5a7a8f1700(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 [ 133.990441] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 133.996318] CR2: 0000000001a6b428 CR3: 00000001cd3f9000 CR4: 00000000001606f0 [ 134.003598] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 134.010864] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 134.018122] Stack: [ 134.020262] ffff8801d71cf600 ffffffff81238076 ffff8801c9c8ba80 ffff8801c9c8ba80 [ 134.028339] 0000001000000001 0000000000000000 1ffff1003ae39eca ffff8801cd37cac8 [ 134.036416] ffff8801cd37ca58 ffff8801cd37ca78 ffff8801c9c8ba80 ffff8801a9b00000 [ 134.044486] Call Trace: [ 134.047070] [] ? trace_hardirqs_on_caller+0x266/0x590 [ 134.053954] [] ? ip6_finish_output2+0x1d00/0x1d00 [ 134.060443] [] ? mark_held_locks+0xc7/0x130 [ 134.066417] [] ? trace_hardirqs_on+0x10/0x10 [ 134.072480] [] ? retint_kernel+0x2d/0x2d [ 134.078192] [] ? trace_hardirqs_on_caller+0x266/0x590 [ 134.085031] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 134.091613] [] ? check_preemption_disabled+0x3b/0x170 [ 134.098440] [] ? retint_kernel+0x2d/0x2d [ 134.104142] [] inet6_csk_xmit+0x27c/0x4d0 [ 134.109923] [] ? inet6_csk_xmit+0xff/0x4d0 [ 134.115798] [] ? inet6_csk_update_pmtu+0x160/0x160 [ 134.122372] [] ? check_preemption_disabled+0x3b/0x170 [ 134.129198] [] l2tp_xmit_skb+0xc45/0xf30 [ 134.134895] [] pppol2tp_sendmsg+0x4e0/0x790 [ 134.140852] [] ? pppol2tp_release+0x2e0/0x2e0 [ 134.146985] [] sock_sendmsg+0xcc/0x110 [ 134.152509] [] ___sys_sendmsg+0x47a/0x840 [ 134.158293] [] ? copy_msghdr_from_user+0x560/0x560 [ 134.164857] [] ? retint_kernel+0x2d/0x2d [ 134.170555] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 134.177376] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 134.183944] [] ? check_preemption_disabled+0x3b/0x170 [ 134.190767] [] ? retint_kernel+0x2d/0x2d [ 134.196462] [] ? __fget_light+0x169/0x1f0 [ 134.202245] [] ? sockfd_lookup_light+0x30/0x160 [ 134.208566] [] __sys_sendmmsg+0x161/0x3d0 [ 134.214362] [] ? SyS_sendmsg+0x50/0x50 [ 134.219890] [] ? fput+0xd2/0x140 [ 134.224897] [] ? __sanitizer_cov_trace_pc+0x14/0x50 [ 134.231553] [] ? SYSC_connect+0x22a/0x300 [ 134.237335] [] ? SYSC_bind+0x280/0x280 [ 134.242870] [] ? SyS_futex+0x206/0x310 [ 134.248399] [] ? do_futex+0x17c0/0x17c0 [ 134.254013] [] ? _raw_spin_unlock_irq+0x38/0x50 [ 134.260322] [] ? __schedule+0x109b/0x1bd0 [ 134.266114] [] SyS_sendmmsg+0x35/0x60 [ 134.271551] [] ? __sys_sendmmsg+0x3d0/0x3d0 [ 134.277514] [] do_syscall_64+0x1a6/0x490 [ 134.283218] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 134.290124] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 55 0e 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 54 24 48 4d 8b a4 24 18 03 00 00 <65> 49 ff 44 24 28 48 c1 ea 03 0f b6 04 02 84 c0 74 08 3c 03 0f [ 134.317392] RIP [] ip6_xmit+0xb2d/0x1b80 [ 134.323224] RSP [ 134.326959] ---[ end trace f15124a515209e0d ]--- 04:22:04 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@link_local, @empty, [], {@arp={0x806, @ether_ipv4={0x6, 0x800, 0x6, 0x4, 0x1, @broadcast, @empty=0xfeffffff, @dev, @local}}}}, &(0x7f00000001c0)) 04:22:04 executing program 7: 04:22:04 executing program 7: 04:22:04 executing program 7: 04:22:04 executing program 2: 04:22:04 executing program 7: 04:22:04 executing program 2: 04:22:04 executing program 7: r0 = socket(0x1e, 0x4, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfb, 0x10020}, 0x0) [ 134.331759] Kernel panic - not syncing: Fatal exception in interrupt [ 134.338597] Dumping ftrace buffer: [ 134.342119] (ftrace buffer empty) [ 134.345803] Kernel Offset: disabled [ 134.349432] Rebooting in 86400 seconds..