[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 21.180759] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 21.962664] random: sshd: uninitialized urandom read (32 bytes read) [ 22.248447] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 23.264633] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.5' (ECDSA) to the list of known hosts. [ 28.852187] random: sshd: uninitialized urandom read (32 bytes read) 2018/06/27 07:51:10 fuzzer started [ 30.454878] random: cc1: uninitialized urandom read (8 bytes read) 2018/06/27 07:51:13 dialing manager at 10.128.0.26:33079 2018/06/27 07:51:17 syscalls: 1716 2018/06/27 07:51:17 code coverage: enabled 2018/06/27 07:51:17 comparison tracing: enabled 2018/06/27 07:51:17 setuid sandbox: enabled 2018/06/27 07:51:17 namespace sandbox: enabled 2018/06/27 07:51:17 fault injection: enabled 2018/06/27 07:51:17 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/06/27 07:51:17 net packed injection: enabled [ 36.686037] random: crng init done 07:52:43 executing program 7: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x856, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) gettid() connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) 07:52:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x14, r1, 0xb0b, 0x0, 0x0, {0x4}}, 0x14}, 0x1}, 0x0) read(r0, &(0x7f0000000040)=""/54, 0x36) 07:52:43 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000), 0x22e) 07:52:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000000c0)=@delqdisc={0x24, 0x26, 0x1, 0x0, 0x0, {0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}, 0x1}, 0x0) 07:52:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffffffffffff00c}, {0x6}]}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000055520000000095f0e85deb0736a4000020"], 0x1}, 0x1}, 0x0) 07:52:43 executing program 3: socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000180)) mq_open(&(0x7f00000001c0)='.vmnet1vmnet1\x00', 0x0, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000080), 0x0, 0x0) keyctl$revoke(0x3, 0x0) 07:52:43 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc008551a, &(0x7f0000000300)={0x1, 0x10000fffffdfd, 0x0, 0x0, "73797a301000010400000000100000000000090000000000000000000000000000000000000d00"}) 07:52:43 executing program 6: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020300030c000000000000000000000002000900020000000000000000000000030006000000000002000000e0000054d81458186fe8b90002000100000000000000060200000000030005000000000002000000e000000100000000000000004949190ba05eac853ac38a7e4ce1dc5fa7eb5de6b223910f0bbf3ecc18baee6592d4298247f71a6d0509bc7c9e5f49c166d3b64936e6d4c0f649212f063d9b"], 0x9f}, 0x1}, 0x0) pipe(&(0x7f00000000c0)) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000003c0)=""/206) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000540)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)) syz_extract_tcp_res(&(0x7f0000000340), 0x3, 0x5) socketpair(0x1b, 0x6, 0x8000000000000000, &(0x7f0000000040)) [ 122.219823] IPVS: ftp: loaded support on port[0] = 21 [ 122.221300] IPVS: ftp: loaded support on port[0] = 21 [ 122.232665] IPVS: ftp: loaded support on port[0] = 21 [ 122.259332] IPVS: ftp: loaded support on port[0] = 21 [ 122.283516] IPVS: ftp: loaded support on port[0] = 21 [ 122.291516] IPVS: ftp: loaded support on port[0] = 21 [ 122.315763] IPVS: ftp: loaded support on port[0] = 21 [ 122.333257] IPVS: ftp: loaded support on port[0] = 21 [ 124.477391] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.483989] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.507782] device bridge_slave_0 entered promiscuous mode [ 124.534851] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.541277] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.550677] device bridge_slave_0 entered promiscuous mode [ 124.565957] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.572397] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.599928] device bridge_slave_0 entered promiscuous mode [ 124.618110] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.624541] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.632672] device bridge_slave_0 entered promiscuous mode [ 124.647535] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.653953] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.681298] device bridge_slave_1 entered promiscuous mode [ 124.706944] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.713434] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.729223] device bridge_slave_0 entered promiscuous mode [ 124.737074] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.743509] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.751401] device bridge_slave_0 entered promiscuous mode [ 124.760743] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.767147] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.777539] device bridge_slave_1 entered promiscuous mode [ 124.786437] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.792907] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.801876] device bridge_slave_0 entered promiscuous mode [ 124.814621] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.821085] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.836542] device bridge_slave_1 entered promiscuous mode [ 124.848630] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.855076] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.864066] device bridge_slave_0 entered promiscuous mode [ 124.873583] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.880064] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.888193] device bridge_slave_1 entered promiscuous mode [ 124.897500] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 124.906710] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.913134] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.921172] device bridge_slave_1 entered promiscuous mode [ 124.935646] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.942104] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.956579] device bridge_slave_1 entered promiscuous mode [ 124.969643] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 124.977085] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.983484] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.996254] device bridge_slave_1 entered promiscuous mode [ 125.010179] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 125.017875] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.024296] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.045243] device bridge_slave_1 entered promiscuous mode [ 125.056583] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 125.078135] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 125.085889] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 125.095266] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 125.108521] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 125.115885] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 125.162952] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 125.172712] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 125.198721] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 125.225831] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 125.254690] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 125.280168] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 125.330360] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 125.512009] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 125.564285] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 125.575790] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 125.639459] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 125.658469] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 125.674736] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 125.687737] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 125.713211] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 125.722382] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 125.760835] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 125.782137] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 125.834944] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 125.844193] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 125.863623] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 125.892701] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 125.914138] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 125.921165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 125.937995] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 125.945082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 125.985359] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 125.994203] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 126.001154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 126.019684] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 126.026650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 126.045259] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 126.076484] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 126.083511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 126.099104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 126.128255] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 126.135203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 126.156907] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 126.166133] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 126.173785] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 126.188946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 126.202640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 126.229767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 126.256877] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 126.274935] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 126.283605] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 126.294269] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 126.302095] team0: Port device team_slave_0 added [ 126.350389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 126.364930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 126.393199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 126.416259] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 126.460277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 126.483614] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 126.501452] team0: Port device team_slave_1 added [ 126.552388] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 126.575713] team0: Port device team_slave_0 added [ 126.599549] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 126.611595] team0: Port device team_slave_0 added [ 126.628354] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 126.643117] team0: Port device team_slave_0 added [ 126.664958] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 126.681830] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 126.690518] team0: Port device team_slave_0 added [ 126.723265] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 126.743811] team0: Port device team_slave_1 added [ 126.761556] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 126.777127] team0: Port device team_slave_0 added [ 126.784992] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 126.795973] team0: Port device team_slave_1 added [ 126.815885] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 126.832794] team0: Port device team_slave_1 added [ 126.840664] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 126.853328] team0: Port device team_slave_1 added [ 126.864655] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 126.878841] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 126.887811] team0: Port device team_slave_0 added [ 126.895420] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 126.905399] team0: Port device team_slave_0 added [ 126.913802] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 126.924569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 126.934470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 126.945153] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 126.953412] team0: Port device team_slave_1 added [ 126.969984] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 126.977493] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 126.984556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 127.004274] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 127.026709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 127.047970] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 127.057220] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 127.065673] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 127.072995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 127.081242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 127.090669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 127.099656] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 127.110600] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 127.119110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 127.129261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 127.144389] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 127.151422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 127.159770] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 127.172184] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 127.187065] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 127.195623] team0: Port device team_slave_1 added [ 127.202637] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 127.212231] team0: Port device team_slave_1 added [ 127.222050] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 127.233905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 127.246788] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 127.273506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 127.289887] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 127.299408] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 127.306810] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 127.320896] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 127.331455] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 127.338876] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 127.346502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 127.357125] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 127.389908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 127.417299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 127.432218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 127.440820] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 127.448991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 127.456830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 127.464680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 127.472648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 127.481256] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 127.490270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 127.498568] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 127.513453] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 127.522048] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 127.536415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 127.551126] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 127.558526] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 127.566586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 127.581449] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 127.590071] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 127.597916] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 127.609063] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 127.630187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 127.646221] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 127.668602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 127.697219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 127.705089] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 127.713176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 127.721126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 127.728927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 127.742696] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 127.753664] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 127.763082] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 127.770287] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 127.782486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 127.794725] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 127.821489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 127.849717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 127.857729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 127.865711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 127.873362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 127.881225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 127.896519] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 127.909623] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 127.921685] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 127.935871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 127.947151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 127.972643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 127.992666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 128.002725] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 128.010601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 128.037279] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 128.047056] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 128.060959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 128.069810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 128.110163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 128.128724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 128.994923] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.001479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.008556] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.015141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.046874] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 129.053371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 129.277441] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.283881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.290577] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.296974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.321221] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 129.329686] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.336116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.342792] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.349196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.362230] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 129.370547] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.376963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.383650] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.390092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.402262] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 129.428427] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.434870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.441543] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.447949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.505225] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 129.556270] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.562699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.569391] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.575784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.607348] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 129.618974] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.625410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.632097] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.638507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.670965] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 129.682157] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.688585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.695256] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.701661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.714935] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 130.084264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 130.096211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 130.127623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 130.145180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 130.152926] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 130.160669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 130.168136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 134.489405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.572532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.749101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.826814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.842228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.858634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.882737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.912833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.023747] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 135.125406] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 135.229635] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 135.289313] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 135.306740] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 135.356657] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 135.374686] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 135.384694] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 135.492695] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 135.498982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 135.512205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 135.658055] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 135.667193] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 135.674372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 135.691396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 135.704537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 135.717133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 135.742329] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 135.763734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 135.796565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 135.878136] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 135.885928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 135.903806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 135.986625] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.995858] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 136.006461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 136.017542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.047856] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 136.054416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 136.070158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.088442] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 136.095968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 136.116759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.148781] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.166746] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.318947] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.463963] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.537379] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.554416] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.667913] 8021q: adding VLAN 0 to HW filter on device team0 07:53:00 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") open$dir(&(0x7f0000000040)='./file0\x00', 0x400, 0x1) umount2(&(0x7f0000000140)='./file0\x00', 0x5fe98107f6699d96) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x208000, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000280)=0x0) recvfrom(r0, &(0x7f00000036c0)=""/4096, 0x1000, 0x10041, &(0x7f0000001480)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x4, 0x4, 0x3, {0xa, 0x4e20, 0x7fff, @loopback={0x0, 0x1}, 0xfffffffffffeffff}}}, 0x80) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0x0, 0x6, 0x3, 0x3, 'syz0\x00', 0x8}, 0x4, 0x201, 0x9, r2, 0x4, 0x2, 'syz1\x00', &(0x7f00000002c0)=[',system\'bdev\x00', '[vboxnet0-nodev-/ppp1eth1nodev#{vmnet1self\x00', 'selinux@md5sum\x00', '*cpusettrusted$\x00'], 0x57, [], [0x432f, 0x3]}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000001500)={0x0, 0x4, 0x6, 0xa0bc, 0x8, 0x3}, &(0x7f0000001540)=0x14) msgget(0x0, 0x82) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000001580)={r3, @in6={{0xa, 0x4e24, 0x7, @remote={0xfe, 0x80, [], 0xbb}, 0x879}}}, &(0x7f0000001640)=0x84) futex(&(0x7f0000000200)=0x1, 0x400000085, 0x0, &(0x7f0000000080), &(0x7f0000001680)=0xffffffffffffffff, 0x0) 07:53:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x80000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x111, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000200)={0xf, 0x8, 0xfa00, {r4, 0xe}}, 0x10) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000140)={0x7b, 0x0, [0x12, 0xfffffffffffffffd]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:53:01 executing program 6: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x7, 0x101401) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f760070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f00000002c0)) 07:53:01 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x4, 0x61) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000140)) r2 = getpgrp(r0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2}, r2, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280), &(0x7f00000002c0)=0x4) rt_sigtimedwait(&(0x7f0000448000), &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) r3 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x70d9, 0x8000) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2400, 0x100) 07:53:01 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r1, 0x3, 0x0, 0xffffffffffff83cd, &(0x7f0000000080)=[0x0, 0x0], 0x2}, 0x20) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) r4 = socket$inet(0x2, 0x7, 0x7fffffff) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x53, &(0x7f0000000240)={{{@in6, @in6=@loopback}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000005880)=0xe8) close(r3) close(r2) 07:53:01 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0xc08c5114, &(0x7f0000000000)) 07:53:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40001, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000040)={0x2, [0x0, 0x0]}) dup2(r0, r0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r2 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x4, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000740], 0x0, &(0x7f00000000c0), &(0x7f0000000740)=[{}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0x108) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000080)=0x0) ptrace$getregset(0x4204, r3, 0x200, &(0x7f0000000180)={&(0x7f0000000800)=""/4096, 0x1000}) 07:53:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000040)=""/9) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000140)="dd131e5d49befde3488db4bd22341bf3f13c82338c7f65d1f4614def2195836308d357ae9d1adf514d4d8247e68a5e6c55859613d063eb731f16879cb61ce76f3e90119aa022520d0cbb63bf1c207021d2c31d6b4f217fbad72cc81639120b0aae83df1220baf96937ca748d005c038934e918214fcfaa1d91b1c40d26414226a155fa4fb3eeb97577ba2f1ff3c2530841a81bb60e2aac387bac04cbb1e1a1eec11aee8c878cdde13d5fef64e7b687f5c70a32af14daf3698bfac88b9a7e09b31ae6d87b846ebbb0fbe5eb253bc61dba3d7b57c3a1642454b0e802a252a64c22a3c8d893e1fbd575fcf9dacbe762f477fb32a004ebc6", 0xf6, 0xfffffffffffffff8) keyctl$invalidate(0x15, r4) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0xaaaaaaaaaaaab72, 0x0, &(0x7f0000000580), 0x0) [ 139.585806] kernel msg: ebtables bug: please report to author: bad policy [ 139.638570] kernel msg: ebtables bug: please report to author: bad policy 07:53:01 executing program 7: dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}], 0x1c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x45, 0x10000000002) syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x800) 07:53:01 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x10000000000002) prctl$intptr(0x0, 0x5) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000040)={&(0x7f0000000400)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000034c0), 0x0, &(0x7f0000000940)=""/42, 0x2a}, 0x202) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f00000004c0), 0x1000002c0) sendmmsg(r1, &(0x7f000000d8c0)=[{}], 0x1, 0x0) sendto$inet(r1, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f0000003540)=""/68, 0x30, 0x10062, &(0x7f0000003640)=@hci={0x1f}, 0x707000) 07:53:01 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x480080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180)={0xffffffff}, 0x13f, 0xe}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xdf, @mcast1={0xff, 0x1, [], 0x1}, 0x51c4}, {0xa, 0x4e20, 0x100000001, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x1}, r2, 0x58}}, 0x48) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000140)=0x8001) read(r0, &(0x7f0000000000)=""/143, 0xfffffe5e) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 07:53:01 executing program 3: mkdir(&(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0x0) r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x9, 0x202) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000280)={0x4, 0x5, 0x401, 0x5, 'syz0\x00', 0x2}) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0xffffffffffffffff, 0x3, 0x1, 0x34, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}, 0x20) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f00000002c0)={0x3, 0x0, 0x7f, 0xfffffffffffffffe, 'syz1\x00', 0x1020000000000000}) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0xb55, 0xdb, "1d3b62429e2cecb817e38f03f1d55e7ab7894a17f30384e6d494bcf1b16cf1c84fd1fab3c58844d6b60f1b0c6abeb2c4f8ed56bdba7b89525d68582cbdef5ca8d122582ae3234143678c6612ffe86cc237241c62cc915d0b29bf9c78bab7eb701efbfe3778550cd897ad94a344df49e88ca1c25d70a4326287587b564df2342a98228076226f08988513778851f1e9eb3f2bdf9a8900fc51445dc723b6fbb72c1eac988595b6c8d66288ffe52051457a1d6cf806525b9d2e2566b054d4c37670589a3e32e4eedc2640bd25bc6f1a27d0580226e21dd2a5afba5b1c"}) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000080)) 07:53:01 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") unshare(0x60000000) r1 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000780)=ANY=[@ANYBLOB="6669847465720005000000000000000000ff0e000000040010000000ffc00000000000f4e2ef507c8c1a35b8ffa0fffffff8020000f802000045270000ffffffff04000000a29ef438735bf7bc0407b50000000000"], 0x1) 07:53:01 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x1, 0x0) syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x400) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="240000000b0607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 07:53:01 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000facfff)="06", 0x1, r1) r3 = add_key$user(&(0x7f0000000500)='user\x00', &(0x7f0000752ffb)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000580)="b3", 0x1, r1) keyctl$update(0x2, r3, &(0x7f0000000340)="df02754677212dfc3e2abcb244e22773e8e1cfef09742258cbae7b26fdc3ffa615d9da494137e175e9f2780ac5e2a09f43a1fcebf272a5a135de92bf4a9033933824f6e6aa0238014e3293535d1c0066d28e0f275188b4b4c187e18774fc2227cbb6610fc6697f5337726164c8fbe1181e6d50986cd98a5c44ac0ec375deb27eafcf7d06438f2525100400000003e7dc2f8fd85adcd88ca30e75b1e143262d94defa187e482a9b9a9a387353df7a21affce4e9149e040000000000000065afd9", 0xc0) r4 = syz_open_dev$adsp(&(0x7f00000001c0)='/dev/adsp#\x00', 0x1, 0x2) openat(r4, &(0x7f0000000200)='./file0\x00', 0x2000, 0x122) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r3, r2}, &(0x7f0000a53ffb)=""/5, 0x5, &(0x7f0000000140)={&(0x7f0000000240)={'sha1-generic\x00'}}) add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, r1) listxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)=""/38, 0x26) syz_open_dev$midi(&(0x7f0000000440)='/dev/midi#\x00', 0xd196, 0x201) 07:53:01 executing program 7: getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000001800)={0x0, 0xfffffffffffff34f}, &(0x7f0000001880)=0x8) clone(0x200, &(0x7f0000fbf000), &(0x7f00000001c0), &(0x7f0000000100), &(0x7f0000000380)="1f88b13f2c9d2b8af034ac5e8bab174922d5f0e436f0f422d84d46228d619a0e193dd071ca41fefe6cec9e011777f256edc81fd4b7843795cda925ef80afa7e5f1af5166e759f43e471b824374512b414b60d4d243650bb415bdd9beb4f88d38dec174b94ed1eb9429a06c7a0658288ad2cb6ee4cdc164c51e98bbca9d67ee1031ba5160619bf5f1287b8864539965d571ef95c7b8b274e217b0793a0c4c3f954a82d6ec3f0a64b8e34bf328df2ade3750c098df2dd158c882bb41616d4cbbbc52c793dd9cb01f7b8a65a3a956a5b5a1b5ef911a3ca14e1b1a0a6b3171a4963e1f4182682965765511d28c2ed104468a") mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000001840)='./file0\x00', &(0x7f0000000180), &(0x7f0000001880)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300)=[&(0x7f0000000240)='eth0\x00', &(0x7f0000000280)='{-(proclocpusetcpusetnodev\x00'], &(0x7f0000000580)=[&(0x7f0000000340)='lousercgroupnodev\x00', &(0x7f0000000500)='/selinux+vmnet0keyring\x00']) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) sysinfo(&(0x7f00000000c0)=""/28) r3 = getpid() write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {r4, 0x1}}, 0x10) r5 = memfd_create(&(0x7f0000000040)="00000600000000000000", 0x0) execveat(r5, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) fcntl$setown(r1, 0x8, r3) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) tkill(r0, 0x16) [ 139.895917] IPVS: ftp: loaded support on port[0] = 21 [ 139.913926] netlink: 'syz-executor2': attribute type 1 has an invalid length. [ 139.919512] ================================================================== [ 139.928841] BUG: KASAN: slab-out-of-bounds in sha1_final+0x283/0x2e0 [ 139.935365] Write of size 4 at addr ffff8801d288a418 by task syz-executor3/6721 [ 139.936837] netlink: 20 bytes leftover after parsing attributes in process `syz-executor2'. [ 139.942811] [ 139.942830] CPU: 1 PID: 6721 Comm: syz-executor3 Not tainted 4.18.0-rc2+ #118 [ 139.942838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 139.942844] Call Trace: [ 139.942866] dump_stack+0x1c9/0x2b4 [ 139.942886] ? dump_stack_print_info.cold.2+0x52/0x52 [ 139.942902] ? printk+0xa7/0xcf [ 139.942920] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 139.942939] ? sha1_final+0x283/0x2e0 [ 139.942958] print_address_description+0x6c/0x20b [ 139.997708] ? sha1_final+0x283/0x2e0 [ 140.001530] kasan_report.cold.7+0x242/0x2fe [ 140.005963] __asan_report_store4_noabort+0x17/0x20 [ 140.011003] sha1_final+0x283/0x2e0 [ 140.014657] crypto_shash_final+0x104/0x260 [ 140.019004] ? sha1_generic_block_fn+0x120/0x120 [ 140.023786] __keyctl_dh_compute+0x1198/0x1be0 [ 140.028404] ? copy_overflow+0x30/0x30 [ 140.032314] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 140.037724] ? lock_release+0xa30/0xa30 [ 140.041741] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 140.047301] ? _copy_from_user+0xdf/0x150 [ 140.051469] keyctl_dh_compute+0xc5/0x11f [ 140.055637] ? __keyctl_dh_compute+0x1be0/0x1be0 [ 140.060415] ? syscall_slow_exit_work+0x500/0x500 [ 140.065276] __x64_sys_keyctl+0x12a/0x3b0 [ 140.067554] IPVS: ftp: loaded support on port[0] = 21 [ 140.069447] do_syscall_64+0x1b9/0x820 [ 140.069464] ? finish_task_switch+0x1d3/0x890 [ 140.069482] ? syscall_return_slowpath+0x5e0/0x5e0 [ 140.069500] ? syscall_return_slowpath+0x31d/0x5e0 [ 140.069521] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 140.069540] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 140.103143] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 140.108344] RIP: 0033:0x455a99 [ 140.111536] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 140.130980] RSP: 002b:00007f8f87492c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 140.138702] RAX: ffffffffffffffda RBX: 00007f8f874936d4 RCX: 0000000000455a99 [ 140.145966] RDX: 0000000020a53ffb RSI: 0000000020000100 RDI: 0000000000000017 [ 140.153234] RBP: 000000000072bea0 R08: 0000000020000140 R09: 0000000000000000 [ 140.160508] R10: 0000000000000005 R11: 0000000000000246 R12: 00000000ffffffff [ 140.167773] R13: 00000000004bfd68 R14: 00000000004cefb8 R15: 0000000000000000 [ 140.175051] [ 140.176675] Allocated by task 6721: [ 140.180296] save_stack+0x43/0xd0 [ 140.183738] kasan_kmalloc+0xc4/0xe0 [ 140.187442] __kmalloc+0x14e/0x760 [ 140.190969] __keyctl_dh_compute+0x1000/0x1be0 [ 140.195540] keyctl_dh_compute+0xc5/0x11f [ 140.199673] __x64_sys_keyctl+0x12a/0x3b0 [ 140.203808] do_syscall_64+0x1b9/0x820 [ 140.207686] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 140.212859] [ 140.214477] Freed by task 0: [ 140.217484] save_stack+0x43/0xd0 [ 140.220923] __kasan_slab_free+0x11a/0x170 [ 140.225153] kasan_slab_free+0xe/0x10 [ 140.228946] kfree+0xd9/0x260 [ 140.232049] selinux_cred_free+0x48/0x80 [ 140.236112] security_cred_free+0x4a/0x80 [ 140.240259] put_cred_rcu+0x12c/0x470 [ 140.244056] rcu_process_callbacks+0xed5/0x1850 [ 140.248734] __do_softirq+0x2e8/0xb17 [ 140.252527] [ 140.254146] The buggy address belongs to the object at ffff8801d288a400 [ 140.254146] which belongs to the cache kmalloc-32 of size 32 [ 140.266631] The buggy address is located 24 bytes inside of [ 140.266631] 32-byte region [ffff8801d288a400, ffff8801d288a420) [ 140.278351] The buggy address belongs to the page: [ 140.283295] page:ffffea00074a2280 count:1 mapcount:0 mapping:ffff8801da8001c0 index:0xffff8801d288afc1 [ 140.292748] flags: 0x2fffc0000000100(slab) 07:53:02 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000240)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x5, 0x1}) [ 140.297002] raw: 02fffc0000000100 ffffea000752fd48 ffffea00074b1e88 ffff8801da8001c0 [ 140.304900] raw: ffff8801d288afc1 ffff8801d288a000 000000010000003f 0000000000000000 [ 140.312788] page dumped because: kasan: bad access detected [ 140.318504] [ 140.320136] Memory state around the buggy address: [ 140.325072] ffff8801d288a300: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 140.332430] ffff8801d288a380: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 140.339811] >ffff8801d288a400: 00 00 00 fc fc fc fc fc fb fb fb fb fc fc fc fc [ 140.347164] ^ [ 140.351304] ffff8801d288a480: fb fb fb fb fc fc fc fc 00 00 00 fc fc fc fc fc [ 140.358649] ffff8801d288a500: 00 00 00 00 fc fc fc fc fb fb fb fb fc fc fc fc [ 140.365991] ================================================================== [ 140.373345] Disabling lock debugging due to kernel taint [ 140.380794] Kernel panic - not syncing: panic_on_warn set ... [ 140.380794] [ 140.388226] CPU: 1 PID: 6721 Comm: syz-executor3 Tainted: G B 4.18.0-rc2+ #118 [ 140.396882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 140.406216] Call Trace: [ 140.408794] dump_stack+0x1c9/0x2b4 [ 140.412412] ? dump_stack_print_info.cold.2+0x52/0x52 [ 140.417588] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 140.422349] panic+0x238/0x4e7 [ 140.425530] ? add_taint.cold.5+0x16/0x16 [ 140.429677] ? do_raw_spin_unlock+0xa7/0x2f0 [ 140.434085] ? do_raw_spin_unlock+0xa7/0x2f0 [ 140.438486] ? sha1_final+0x283/0x2e0 [ 140.442275] kasan_end_report+0x47/0x4f [ 140.446236] kasan_report.cold.7+0x76/0x2fe [ 140.450557] __asan_report_store4_noabort+0x17/0x20 [ 140.455562] sha1_final+0x283/0x2e0 [ 140.459182] crypto_shash_final+0x104/0x260 [ 140.463490] ? sha1_generic_block_fn+0x120/0x120 [ 140.468246] __keyctl_dh_compute+0x1198/0x1be0 [ 140.472823] ? copy_overflow+0x30/0x30 [ 140.476700] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 140.482068] ? lock_release+0xa30/0xa30 [ 140.486042] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 140.491590] ? _copy_from_user+0xdf/0x150 [ 140.495729] keyctl_dh_compute+0xc5/0x11f [ 140.499863] ? __keyctl_dh_compute+0x1be0/0x1be0 [ 140.504607] ? syscall_slow_exit_work+0x500/0x500 [ 140.509437] __x64_sys_keyctl+0x12a/0x3b0 [ 140.513574] do_syscall_64+0x1b9/0x820 [ 140.517447] ? finish_task_switch+0x1d3/0x890 [ 140.521927] ? syscall_return_slowpath+0x5e0/0x5e0 [ 140.526842] ? syscall_return_slowpath+0x31d/0x5e0 [ 140.531761] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 140.537112] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 140.541942] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 140.547118] RIP: 0033:0x455a99 [ 140.550290] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 140.569489] RSP: 002b:00007f8f87492c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 140.577184] RAX: ffffffffffffffda RBX: 00007f8f874936d4 RCX: 0000000000455a99 [ 140.584971] RDX: 0000000020a53ffb RSI: 0000000020000100 RDI: 0000000000000017 [ 140.592355] RBP: 000000000072bea0 R08: 0000000020000140 R09: 0000000000000000 [ 140.599869] R10: 0000000000000005 R11: 0000000000000246 R12: 00000000ffffffff [ 140.607133] R13: 00000000004bfd68 R14: 00000000004cefb8 R15: 0000000000000000 [ 140.614934] Dumping ftrace buffer: [ 140.618467] (ftrace buffer empty) [ 140.622173] Kernel Offset: disabled [ 140.625789] Rebooting in 86400 seconds..