[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 13.257484] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 21.244616] random: sshd: uninitialized urandom read (32 bytes read) [ 21.596585] random: sshd: uninitialized urandom read (32 bytes read) [ 22.245727] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.50' (ECDSA) to the list of known hosts. [ 27.795506] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/27 02:47:37 fuzzer started [ 29.000523] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/27 02:47:39 dialing manager at 10.128.0.26:38095 2018/08/27 02:47:44 syscalls: 1 2018/08/27 02:47:44 code coverage: enabled 2018/08/27 02:47:44 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/08/27 02:47:44 setuid sandbox: enabled 2018/08/27 02:47:44 namespace sandbox: enabled 2018/08/27 02:47:44 fault injection: CONFIG_FAULT_INJECTION is not enabled 2018/08/27 02:47:44 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/08/27 02:47:44 net packed injection: enabled 2018/08/27 02:47:44 net device setup: enabled [ 36.249564] random: crng init done INIT: Id "3" respawning too fast: disabled for 5 minutes INIT: Id "4" respawning too fast: disabled for 5 minutes INIT: Id "5" respawning too fast: disabled for 5 minutes INIT: Id "6" respawning too fast: disabled for 5 minutes INIT: Id "2" respawning too fast: disabled for 5 minutes INIT: Id "1" respawning too fast: disabled for 5 minutes 02:49:19 executing program 0: exit(0x0) capset(&(0x7f0000000240)={0x20071026}, &(0x7f0000000080)) umount2(&(0x7f00000005c0)='./file0\x00', 0x0) 02:49:19 executing program 2: r0 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000080)={0x2, 0x404e23, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f00000003c0), 0xfffffdef, 0x1f4, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 02:49:19 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2000000008}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x181, 0x4) sendmmsg(r1, &(0x7f00000002c0), 0x400000000000027, 0x0) 02:49:19 executing program 3: r0 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000080)={0x2, 0x404e23, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) write(r0, &(0x7f0000000900)="89", 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f00000003c0), 0xfffffdef, 0x1f4, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 02:49:19 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) dup3(r0, r1, 0x80000) 02:49:19 executing program 5: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f00000038c0)=[{{&(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000001780)=[{0x10, 0x1}], 0x10}}], 0x1, 0x0) 02:49:19 executing program 6: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) write$binfmt_elf64(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000000000000000000000a1000000000000000000000000000000000000000200380000000000f60000008000000000000000feffffffffffffff00000000640000000000000000000000020000000000000000000000000000000000000000000000"], 0x78) 02:49:19 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x1000000000000, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) memfd_create(&(0x7f0000000100)='bridge_slave_1\x00', 0x3) [ 130.255435] IPVS: Creating netns size=2536 id=1 [ 130.285235] IPVS: Creating netns size=2536 id=2 [ 130.328432] IPVS: Creating netns size=2536 id=3 [ 130.372139] IPVS: Creating netns size=2536 id=4 [ 130.402646] IPVS: Creating netns size=2536 id=5 [ 130.434430] IPVS: Creating netns size=2536 id=6 [ 130.512783] IPVS: Creating netns size=2536 id=7 [ 130.592546] IPVS: Creating netns size=2536 id=8 [ 131.186251] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 131.253483] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 131.299814] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 131.323785] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 131.380823] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 131.399777] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 131.411762] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 131.455881] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 131.573814] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 131.626093] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 131.665046] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 131.692272] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 131.700601] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 131.744164] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 131.788423] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 131.798631] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 131.814071] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 131.823141] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 131.864417] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 131.882218] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 131.891930] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 131.899714] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 131.943373] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 131.953978] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 132.046684] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 132.078709] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 132.128016] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 132.152737] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 132.162567] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 132.179494] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 132.234476] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 132.246729] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 132.263441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 132.272106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 132.280613] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 132.303701] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 132.312371] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 132.322140] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 132.329922] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 132.365600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 132.376097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 132.385173] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 132.404578] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 132.420629] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 132.442326] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 132.453368] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 132.460853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 132.472373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 132.488120] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 132.511457] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 132.528253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 132.536927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 132.556097] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 132.567562] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 132.577579] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 132.593120] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 132.600657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 132.614357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 132.622781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 132.644493] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 132.652486] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 132.667884] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 132.685903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 132.698271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 132.705997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 132.715247] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 132.723073] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 132.741979] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 132.793822] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 132.804435] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 132.832579] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 132.840187] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 132.855689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 132.878020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 132.885710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 132.893178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 132.903887] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 132.911187] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 132.918551] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 132.927817] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 132.942285] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 132.954728] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 132.970734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 132.983764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 132.991379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 132.998862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.006469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.023600] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 133.032198] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 133.053751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.066577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.082995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.090413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.130372] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 133.145664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.154289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 134.010503] ip (4889) used greatest stack depth: 23976 bytes left [ 136.968219] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 137.187046] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 137.210790] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 137.225940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.247507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.327124] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 137.449570] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 137.462580] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 137.469542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.476938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.488562] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 137.577856] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 137.607590] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 137.618874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.637556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.654459] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 137.662934] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 137.674749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.685309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.720480] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 137.729139] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 137.740181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.750578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.898083] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 137.912980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.919728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.938393] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 137.946616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.963635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.973101] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 137.980739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.991930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.165618] hrtimer: interrupt took 1824043 ns [ 139.238876] capability: warning: `syz-executor0' uses deprecated v2 capabilities in a way that may be insecure 02:49:29 executing program 7: openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x80, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='statm\x00') write$P9_ROPEN(r0, &(0x7f0000000040)={0x18}, 0x18) 02:49:29 executing program 7: 02:49:29 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in, 0x1000000000000, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 02:49:29 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000000)=0x534efde5d2bae478) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f00000000c0)) 02:49:29 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000e05000)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x4, 0x1000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xc0}}, 0x0) 02:49:29 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in, 0x1000000000000, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 02:49:29 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000000)=0x534efde5d2bae478) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f00000000c0)) 02:49:29 executing program 6: r0 = socket(0x10, 0x20000000802, 0x0) write(r0, &(0x7f0000ea8000)="240000001a0025f00018000422edfc0e8000000000000000000000010800020048050000", 0x24) [ 139.854813] syz-executor3 (6831) used greatest stack depth: 23368 bytes left 02:49:29 executing program 0: 02:49:29 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000001640)=""/252, &(0x7f0000001740)=0xfc) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280), 0x0) getsockname$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000340)=0x1c) syz_open_procfs(0x0, &(0x7f00000002c0)='loginuid\x00') 02:49:29 executing program 6: r0 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000080)={0x2, 0x404e23, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) write(r0, &(0x7f0000000900)="89", 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f00000003c0), 0xfffffdef, 0x1f4, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 02:49:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x6, 0x1, 0x0, 0x0, 0x0, 0x6, {0x0, 0x2, 0x0, 0x0, 0x0, 0x3f30, 0x0, 0x977e, 0x0, 0xffffffff, 0x2, r1, 0x0, 0x2, 0xffffffffffffffff}}}, 0x90) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getsockopt$sock_buf(r0, 0x1, 0x0, &(0x7f0000000400)=""/227, &(0x7f0000000500)=0xe3) fsync(0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x5000000) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000040)={{0x2, 0x4e24, @remote}, {0x1, @dev={[], 0x17}}, 0x4, {0x2, 0x4e20, @broadcast}, 'irlan0\x00'}) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) 02:49:29 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000000)=0x534efde5d2bae478) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f00000000c0)) 02:49:29 executing program 2: r0 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000080)={0x2, 0x404e23, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f00000003c0), 0xfffffdef, 0x1f4, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 02:49:29 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in, 0x1000000000000, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 02:49:29 executing program 3: r0 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000080)={0x2, 0x404e23, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) write(r0, &(0x7f0000000900)="89", 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f00000003c0), 0xfffffdef, 0x1f4, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 02:49:29 executing program 0: 02:49:29 executing program 1: 02:49:29 executing program 3: r0 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000080)={0x2, 0x404e23, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) write(r0, &(0x7f0000000900)="89", 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f00000003c0), 0xfffffdef, 0x1f4, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 02:49:29 executing program 0: 02:49:29 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000000)=0x534efde5d2bae478) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f00000000c0)) 02:49:29 executing program 1: 02:49:29 executing program 0: 02:49:29 executing program 1: 02:49:29 executing program 3: r0 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000080)={0x2, 0x404e23, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) write(r0, &(0x7f0000000900)="89", 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f00000003c0), 0xfffffdef, 0x1f4, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 02:49:29 executing program 1: 02:49:30 executing program 0: 02:49:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x6, 0x1, 0x0, 0x0, 0x0, 0x6, {0x0, 0x2, 0x0, 0x0, 0x0, 0x3f30, 0x0, 0x977e, 0x0, 0xffffffff, 0x2, r1, 0x0, 0x2, 0xffffffffffffffff}}}, 0x90) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getsockopt$sock_buf(r0, 0x1, 0x0, &(0x7f0000000400)=""/227, &(0x7f0000000500)=0xe3) fsync(0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x5000000) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000040)={{0x2, 0x4e24, @remote}, {0x1, @dev={[], 0x17}}, 0x4, {0x2, 0x4e20, @broadcast}, 'irlan0\x00'}) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) 02:49:30 executing program 7: 02:49:30 executing program 3: 02:49:30 executing program 1: 02:49:30 executing program 6: 02:49:30 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f00000000c0)) 02:49:30 executing program 0: 02:49:30 executing program 2: r0 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000080)={0x2, 0x404e23, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f00000003c0), 0xfffffdef, 0x1f4, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 02:49:30 executing program 0: 02:49:30 executing program 6: 02:49:30 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='/'], 0x1) 02:49:30 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {0x3ff}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 02:49:30 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x1000000000000, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 02:49:30 executing program 2: r0 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000080)={0x2, 0x404e23, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f00000003c0), 0xfffffdef, 0x1f4, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 02:49:30 executing program 6: syz_emit_ethernet(0x7a, &(0x7f0000000380)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty, {[], @gre}}}}}, &(0x7f00000000c0)) 02:49:30 executing program 0: 02:49:30 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4}, &(0x7f00000000c0)=0x20) r1 = socket$l2tp(0x18, 0x1, 0x1) memfd_create(&(0x7f00000001c0)='bridge_slave_1\x00', 0x0) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000140)={0x23, 0x6f, 0x2, {0x2, [{0x0, 0x2}, {0x20, 0x1, 0x7}]}}, 0x23) 02:49:30 executing program 3: 02:49:30 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f00000000c0)) 02:49:30 executing program 1: 02:49:30 executing program 7: 02:49:30 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) memfd_create(&(0x7f00000001c0)='bridge_slave_1\x00', 0x0) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x1000000000000, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) memfd_create(&(0x7f0000000100)='bridge_slave_1\x00', 0x0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000140)={0x9}, 0x9) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_1\x00', 0xfffffffffffffe59}) 02:49:30 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 02:49:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) r1 = dup(r0) getsockname(r1, &(0x7f0000000000), &(0x7f00000000c0)=0x80) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='threaded\x00', 0x9) 02:49:30 executing program 7: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f00000003c0), 0x0, 0x98b1}], 0x0, &(0x7f0000000500)={[{@utf8='utf8=1'}, {@numtail='nonumtail=0'}, {@uni_xlateno='uni_xlate=0'}, {@shortname_win95='shortname=win95'}, {@numtail='nonumtail=0'}]}) 02:49:30 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x0, 0x2}, &(0x7f00000000c0)=0x20) r1 = socket$l2tp(0x18, 0x1, 0x1) memfd_create(&(0x7f00000001c0)='bridge_slave_1\x00', 0x0) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x1000000000000, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) r2 = memfd_create(&(0x7f0000000100)='bridge_slave_1\x00', 0x0) write$P9_RWALK(r2, &(0x7f0000000140)={0x9, 0x6f, 0x2}, 0x9) 02:49:30 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000080)=""/116, 0x28) 02:49:30 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000500)={[{@utf8='utf8=1'}, {@shortname_mixed='shortname=mixed'}]}) 02:49:30 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f00000000c0)) 02:49:30 executing program 3: [ 140.643429] FAT-fs (loop7): bogus number of reserved sectors [ 140.697598] FAT-fs (loop0): bogus number of reserved sectors 02:49:30 executing program 3: 02:49:30 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000000)=0x534efde5d2bae478) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f00000000c0)) [ 140.697603] FAT-fs (loop0): Can't find a valid FAT filesystem [ 140.751663] FAT-fs (loop0): bogus number of reserved sectors [ 140.751669] FAT-fs (loop0): Can't find a valid FAT filesystem [ 140.857249] FAT-fs (loop7): Can't find a valid FAT filesystem [ 140.927236] FAT-fs (loop7): bogus number of reserved sectors [ 140.933576] ------------[ cut here ]------------ [ 140.933595] WARNING: CPU: 1 PID: 17 at net/ipv4/af_inet.c:167 inet_sock_destruct+0x598/0x760 [ 140.933599] Kernel panic - not syncing: panic_on_warn set ... [ 140.933599] [ 140.933608] CPU: 1 PID: 17 Comm: ksoftirqd/1 Not tainted 4.9.124-g09eb2ba #31 [ 140.933612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 140.933624] ffff8801d9abfa48 ffffffff81eb95e9 ffffffff83c48ac0 00000000ffffffff [ 140.933634] 0000000000000000 0000000000000001 00000000000000a7 ffff8801d9abfb08 [ 140.933644] ffffffff81423eb5 0000000041b58ab3 ffffffff843bb8e8 ffffffff81423cf6 [ 140.933646] Call Trace: [ 140.933657] [] dump_stack+0xc1/0x128 [ 140.933668] [] panic+0x1bf/0x3bc [ 140.933675] [] ? add_taint.cold.6+0x16/0x16 [ 140.933685] [] ? debug_object_deactivate+0x340/0x340 [ 140.933692] [] ? __warn.cold.9+0xa6/0x17f [ 140.933700] [] ? inet_sock_destruct+0x598/0x760 [ 140.933706] [] __warn.cold.9+0xc1/0x17f [ 140.933716] [] warn_slowpath_null+0x2c/0x40 [ 140.933723] [] inet_sock_destruct+0x598/0x760 [ 140.933730] [] ? ipv4_mib_init_net+0x570/0x570 [ 140.933739] [] l2tp_tunnel_destruct+0x339/0x590 [ 140.933745] [] ? l2tp_tunnel_destruct+0x1aa/0x590 [ 140.933752] [] ? l2tp_tunnel_del_work+0x470/0x470 [ 140.933761] [] __sk_destruct+0x55/0x590 [ 140.933772] [] rcu_process_callbacks+0x8ae/0x12b0 [ 140.933779] [] ? rcu_process_callbacks+0x98e/0x12b0 [ 140.933786] [] ? sock_set_timeout+0x210/0x210 [ 140.933795] [] __do_softirq+0x210/0x940 [ 140.933805] [] ? takeover_tasklets+0x780/0x780 [ 140.933812] [] run_ksoftirqd+0x30/0x60 [ 140.933821] [] smpboot_thread_fn+0x5c9/0x900 [ 140.933829] [] ? sort_range+0x30/0x30 [ 140.933836] [] ? __kthread_parkme+0xcf/0x240 [ 140.933844] [] ? schedule+0x89/0x1b0 [ 140.933851] [] ? __kthread_parkme+0x175/0x240 [ 140.933857] [] kthread+0x26d/0x300 [ 140.933864] [] ? sort_range+0x30/0x30 [ 140.933870] [] ? kthread_park+0xa0/0xa0 [ 140.933877] [] ? __switch_to_asm+0x34/0x70 [ 140.933884] [] ? kthread_park+0xa0/0xa0 [ 140.933890] [] ? kthread_park+0xa0/0xa0 [ 140.933896] [] ret_from_fork+0x5c/0x70 [ 140.934306] Dumping ftrace buffer: [ 140.934338] (ftrace buffer empty) [ 140.934340] Kernel Offset: disabled [ 141.197932] Rebooting in 86400 seconds..