[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 16.920601] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 18.303899] random: sshd: uninitialized urandom read (32 bytes read) [ 18.579422] random: sshd: uninitialized urandom read (32 bytes read) [ 19.063952] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.23' (ECDSA) to the list of known hosts. [ 24.572339] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/04 02:28:14 fuzzer started [ 25.754030] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/04 02:28:17 dialing manager at 10.128.0.26:46743 2018/08/04 02:28:20 syscalls: 1 2018/08/04 02:28:20 code coverage: enabled 2018/08/04 02:28:20 comparison tracing: enabled 2018/08/04 02:28:20 setuid sandbox: enabled 2018/08/04 02:28:20 namespace sandbox: enabled 2018/08/04 02:28:20 fault injection: enabled 2018/08/04 02:28:20 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/08/04 02:28:20 net packed injection: enabled 2018/08/04 02:28:20 net device setup: enabled [ 31.210386] random: crng init done 02:29:22 executing program 0: socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xffff, 0x408a41) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) write$FUSE_LK(r1, &(0x7f00000000c0)={0x28, 0x0, 0x7, {{0x9, 0x6, 0x2, r2}}}, 0x28) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x1033, r1, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = dup(r3) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x801, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000140)={0x1, 0x7ff, 0x0, 0x4}, 0x6) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r6, 0xfffffffffffffff9}}, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000400)={&(0x7f0000000240), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xcc, r7, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x140000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x400}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6a}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3f, 0x2}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x47}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7c}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8044}, 0x4) setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f0000000440)={0x49fe, 0x6a2, 0x7f, 0x100000001}, 0x6) ioctl$PPPIOCGFLAGS(r5, 0x8004745a, &(0x7f0000000480)) r8 = socket$nl_crypto(0x10, 0x3, 0x15) renameat(r4, &(0x7f00000004c0)='./file0\x00', r1, &(0x7f0000000500)='./file0\x00') epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000540)={0x10}) alarm(0xbd79) prctl$getreaper(0x0, &(0x7f0000000580)) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000005c0)) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000600)={0x0, 0x7, 0x80000001, 0x5}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r4) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r4, 0x111, 0x5, 0x0, 0x4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000640)={0x0, 0x2}, &(0x7f0000000680)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000006c0)={r9, 0x4, 0x10, 0x362, 0x3}, &(0x7f0000000700)=0x18) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0xc028ae92, &(0x7f0000000740)={0x4, 0x9}) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x7f) 02:29:22 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x10000, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000040)) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000080)) getresgid(&(0x7f0000000200), &(0x7f0000000240)=0x0, &(0x7f0000000280)) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000000380)=[r1, r3]) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='illinois\x00', 0x9) quotactl(0x1d82e458, &(0x7f0000000400)='./file0\x00', r2, &(0x7f0000000440)="2274ecc5c8c94a30b73c84b17bb239e5d59d15f51e361cac212ed5ad707850a19118b3c4d52de639f918685660e7c199ef968a333b45a19def77d31c517a2aff8d277c555462b0e71125ae49d621a9d1c1a37d73dab4cd3e262d47c0cc133cd1e45036c45459ba9e41a5af1dc03192ff6f7ee3f8be6eb34b14e3e03a12d7e37961e9255bccf1576902898e1c287667495eba2472fac5f36cc6cafe75c021a8ea9b1802f286fce2004ab90324b1b320c9818b30cdecd24cd574511be9c7") ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000500)=""/63) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000540)) r4 = shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_UNLOCK(r4, 0xc) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000580)={0x0, 0xacd, 0x872, 0x1ff, 0xffffffffffffff0b}, &(0x7f00000005c0)=0x14) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000600)={r5, @in={{0x2, 0x4e22, @broadcast}}}, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000740)={0x80000001, 0x10, [0x7000000000000, 0x9, 0x665c, 0x8]}) getsockopt$inet_mreq(r0, 0x0, 0x27, &(0x7f0000000780)={@rand_addr, @loopback}, &(0x7f00000007c0)=0x8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800)='/dev/ptmx\x00', 0x80000, 0x0) connect$l2tp(r0, &(0x7f0000000840)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x2, 0x4, 0x2, 0x1}}, 0x2e) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000880)='/dev/ion\x00', 0x8000, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000900)={0x1, 0x70, 0x100000000, 0x0, 0x7, 0x8001, 0x0, 0x80, 0x400, 0x4, 0x80000001, 0xff, 0x5a860, 0x1, 0x101, 0x3, 0x7, 0x8, 0x9, 0x4b0c9355, 0x9, 0x8, 0x10001, 0x100000001, 0xfffffffffffffbff, 0x80, 0x3, 0x2, 0x58, 0x200, 0x0, 0x6, 0xffffffffffffffe0, 0x0, 0x4, 0x8, 0x1, 0xd7a, 0x0, 0x5, 0x4, @perf_bp={&(0x7f00000008c0), 0x1}, 0x10, 0x3ff, 0x400000008000000, 0x1, 0x100000000, 0x4, 0xff}, r0, 0x4, r0, 0xd) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000980)=@int=0xb9, 0x4) shmat(r4, &(0x7f0000ff9000/0x4000)=nil, 0x1000) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f00000009c0)={0x7, 0x80, 0x6, 0x8001, 0x6, 0x7}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000a00)) ioctl$PERF_EVENT_IOC_REFRESH(r7, 0x2402, 0x3) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000b00)='reno\x00', 0x5) syncfs(r6) 02:29:22 executing program 7: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000140)=0x6000) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000180)={0x1, 'ip6_vti0\x00', 0x2}, 0x18) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x80042, 0x0) open_by_handle_at(r1, &(0x7f0000000200)={0xf0, 0x7, "7bd5ecc8d6115cf65659b6fbc5169c550f144d760462db40a361fcd464b61e01985d703c5b26dc68b5a27647c66ed9280079c7a877293ba28ea9d2003e756ebf8b016d83c87d470f18a9a0f7eef7fbc0e1366056a6421d57b0fe9868089609d605749d2479aa531bc00e9a1c5e57408ca3f1e1b37f9082005d798e4da9336c9ca5c43988f0386b31b259ae21f1cdf741a4ac3ed0710a5d5cb5b1d39992670a06f061944b1560fa12df1d208eb36af953cf398fcf5c457221b41d293c0d46ae543db4d49ed1ac92ef48229e4c27f87a839d7b9321276eea802e1fb4101bbee66b8ddb787d126a0c0f"}, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000300), &(0x7f0000000340)=0x4) sendmsg$kcm(r0, &(0x7f0000001800)={&(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @local}, 0x4, 0x2, 0x1, 0x3}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="cca1faef01947107d00f61c67621b09b2bbd906df1f903e25dfc47491bed1ca37746a3fa5bf5a5cb4b881d5ca24f18b6cb7ef81d2dea560fc9376b608b3105e80ee11d959735d7dda47c9011d5d8ebd1d832ac89f91c6d3005f39338c236979dbffc9fff5cbe705758272ce0a0b48ff31bfb4c86750bb09f09a7e85dab99a8c995777e64296af46feed0e41d8631a57547d22c700264959541869095e7dcac55530f03a289a3d336d2190d449da50b72629fef3773f257a7b0ee2c4bb245d58434d8547b688c3c6fdf3727dc", 0xcc}, {&(0x7f0000001500)="fc10323bc70fe81e5ea926d73d8ae9beaad4828504476eb3f0a0176f2203615555ab77f05a9c44ddc40b5166d0a96d7f88da7484e1e143734d19cabeba48ce9b581949a88df730f4800a68da4e07c320641fab5682e50dcc33204a67bbe98106278b7f6e2062ba5df7313d2dd8c9097870f3c214f8c98446c89dc72fcad19b1fc52799a8f98520c03c57dfd71b0a8468507eb0772f3d7fb35c09f05bb2d3f1c8ddf92e6ef64851218388a9eb8b898412ba6fa47d3a4376e560de7dfa", 0xbc}, {&(0x7f00000015c0)="4a2c93b154fb65e97e99b814aee99b9986935649b9517d8e932c8055a3ebc15ccc365b29878b804b5110b5856074e68b34b15b762bd8e9536b51c83d4d718dfe75aed83fee5ad5f6950037062350a5f1ec10decae5462b7d632bc5ec1c81e5af41f41cb8c9ba5bc62297bc5586d3", 0x6e}, {&(0x7f0000001640)="37995977f35ec45b73800a6b9b0e185ebc542b06ceae5e22f89de6155ca84a1387f158f81b0df0bd2c32778ab90c8e2ae6bbfa8008d185dc827296d41a0467e2f6040c7f85d97e2dbed879a93eeea9f46854564a2da0bf13aad50fcc5c24249231f2ec92c99398fb1a92c70d66409e922c35", 0x72}, {&(0x7f00000016c0)="3c41e421368296ba0537a4cec10d6c553fd168513df7edcf10c7472ed99dc985ee9c9b682ecdf52a16e85b3d9f5014a2927291fc1f55775d913efa707272652f7b66db77ab015c85493724849264d31b26278add09c2670ead8d55863fc3a47671775e5e5e1bf1d2e535cf39981d786db76cbffe618a6f25d7086d", 0x7b}, {&(0x7f0000001740)="9285259c11b62ee2f9c00673ad17cc8bee4970c7cc5ce569f5cd8e6f93184017420bbb", 0x23}], 0x7, 0x0, 0x0, 0x4801}, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001880)={&(0x7f0000001840)='./file0\x00', r1}, 0x10) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/autofs\x00', 0x288080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001a00)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000019c0)={0xffffffffffffffff}, 0x117, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000001a40)={0xb, 0x10, 0xfa00, {&(0x7f0000001900), r3, 0x100}}, 0x18) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001bc0)={0x2, 0x0, [{0x0, 0x0, &(0x7f0000001a80)}, {0x15000, 0xd2, &(0x7f0000001ac0)=""/210}]}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000001c40)) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000001c80)=0x1f, 0x4) sendfile(r0, r1, &(0x7f0000001cc0), 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001d00)='/dev/dsp\x00', 0x101000, 0x0) io_setup(0x101, &(0x7f0000001d40)=0x0) io_destroy(r5) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000001d80)={r2}) openat$dsp(0xffffffffffffff9c, &(0x7f0000001dc0)='/dev/dsp\x00', 0x620100, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001e40)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000001f40)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x44, r6, 0xd00, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40884}, 0x40) ioctl$ASHMEM_GET_SIZE(r4, 0x7704, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000001f80)={0x0, 0xb25e, 0x3, [0x1f, 0x6, 0xffffffff80000001]}, &(0x7f0000001fc0)=0xe) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000002000)={r7, 0xff, 0x30}, &(0x7f0000002040)=0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000002080)={0x4, 0x6e2, 0x6, 'queue1\x00', 0x100}) 02:29:22 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x8000, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000000040)={0x3, 0x1f, 0xfffffffffffffff8, 0x2, 0xc3c2}) r1 = memfd_create(&(0x7f0000000080)='GPLnodev\x00', 0x2) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x6, "d6987c095c26"}, &(0x7f0000000100)=0x2a) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000140)={'gretap0\x00', {0x2, 0x4e24, @broadcast}}) setsockopt$inet6_tcp_buf(r1, 0x6, 0xd, &(0x7f0000000180)="57d3581a753c", 0x6) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f00000001c0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@mcast1, @in=@multicast2, 0x4e24, 0x1f, 0x4e23, 0x7, 0x2, 0xa0, 0x20, 0x32, 0x0, r3}, {0x0, 0x3, 0x1ff, 0xfff, 0x3ff, 0x5, 0x6, 0x6}, {0xfffffffffffffff9, 0x4, 0x89, 0xc8}, 0x9, 0x6e6bb2, 0x2, 0x1, 0x1, 0x2}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0xa, @in=@multicast2, 0x3500, 0x3, 0x1, 0x3f, 0x2, 0x2, 0x2}}, 0xe8) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000380)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x42000, 0x0) r5 = getpgid(r2) recvmmsg(r1, &(0x7f0000005500)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000400)=""/201, 0xc9}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/179, 0xb3}, {&(0x7f00000015c0)=""/17, 0x11}], 0x4, &(0x7f0000001640)=""/87, 0x57, 0x5}, 0x5}, {{&(0x7f00000016c0)=@alg, 0x80, &(0x7f0000001a40)=[{&(0x7f0000001740)=""/200, 0xc8}, {&(0x7f0000001840)=""/200, 0xc8}, {&(0x7f0000001940)=""/254, 0xfe}], 0x3, &(0x7f0000001a80)=""/114, 0x72, 0x4}, 0xfffffffffffffff8}, {{&(0x7f0000001b00)=@generic, 0x80, &(0x7f0000002040)=[{&(0x7f0000001b80)=""/12, 0xc}, {&(0x7f0000001bc0)=""/24, 0x18}, {&(0x7f0000001c00)=""/165, 0xa5}, {&(0x7f0000001cc0)=""/105, 0x69}, {&(0x7f0000001d40)=""/208, 0xd0}, {&(0x7f0000001e40)}, {&(0x7f0000001e80)=""/159, 0x9f}, {&(0x7f0000001f40)=""/87, 0x57}, {&(0x7f0000001fc0)=""/109, 0x6d}], 0x9, &(0x7f0000002100)=""/192, 0xc0}}, {{&(0x7f00000021c0)=@generic, 0x80, &(0x7f0000002400)=[{&(0x7f0000002240)=""/134, 0x86}, {&(0x7f0000002300)=""/15, 0xf}, {&(0x7f0000002340)=""/68, 0x44}, {&(0x7f00000023c0)}], 0x4, &(0x7f0000002440)=""/175, 0xaf, 0xffffffff}, 0x7}, {{&(0x7f0000002500)=@nl=@unspec, 0x80, &(0x7f00000025c0)=[{&(0x7f0000002580)=""/29, 0x1d}], 0x1, 0x0, 0x0, 0x6}, 0x7ff}, {{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002600)=""/20, 0x14}, {&(0x7f0000002640)=""/4096, 0x1000}], 0x2, &(0x7f0000003680)=""/102, 0x66, 0x23}, 0x7}, {{&(0x7f0000003700)=@nfc_llcp, 0x80, &(0x7f0000003840)=[{&(0x7f0000003780)=""/8, 0x8}, {&(0x7f00000037c0)=""/120, 0x78}], 0x2, &(0x7f0000003880)=""/214, 0xd6, 0x7}, 0x3f}, {{&(0x7f0000003980)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000003a00)=""/211, 0xd3}, {&(0x7f0000003b00)=""/166, 0xa6}, {&(0x7f0000003bc0)=""/70, 0x46}], 0x3, 0x0, 0x0, 0xad}, 0xffffffff}, {{&(0x7f0000003c80)=@xdp, 0x80, &(0x7f0000004040)=[{&(0x7f0000003d00)=""/195, 0xc3}, {&(0x7f0000003e00)=""/239, 0xef}, {&(0x7f0000003f00)=""/51, 0x33}, {&(0x7f0000003f40)=""/87, 0x57}, {&(0x7f0000003fc0)=""/109, 0x6d}], 0x5, &(0x7f00000040c0)=""/130, 0x82, 0xac76}}, {{&(0x7f0000004180)=@ll, 0x80, &(0x7f0000005480)=[{&(0x7f0000004200)=""/4096, 0x1000}, {&(0x7f0000005200)=""/76, 0x4c}, {&(0x7f0000005280)=""/1, 0x1}, {&(0x7f00000052c0)=""/173, 0xad}, {&(0x7f0000005380)=""/105, 0x69}, {&(0x7f0000005400)=""/96, 0x60}], 0x6, 0x0, 0x0, 0x9}, 0x7fffffff}], 0xa, 0x12002, &(0x7f0000005780)) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f00000057c0)={'nat\x00', 0x3, [{}, {}, {}]}, 0x58) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000005840)={{0x29, @multicast2, 0x4e22, 0x2, 'sed\x00', 0x20, 0x0, 0x66}, {@rand_addr=0x7, 0x4e20, 0x3, 0x4, 0x9, 0x80000000}}, 0x44) write$FUSE_LK(r1, &(0x7f00000058c0)={0x28, 0x0, 0x8, {{0x46a, 0xe, 0x1, r2}}}, 0x28) sched_setattr(r5, &(0x7f0000005900)={0x30, 0x0, 0x1, 0x7, 0x100, 0x80000000, 0x7fff, 0x8}, 0x0) ioctl$sock_proto_private(r1, 0x89e8, &(0x7f0000005940)="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") ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000005a40)) r7 = syz_open_dev$audion(&(0x7f0000005a80)='/dev/audio#\x00', 0x3ff, 0x20000) clock_gettime(0x0, &(0x7f0000005b00)={0x0, 0x0}) ppoll(&(0x7f0000005ac0)=[{r6, 0x4}, {r0, 0x2}, {r6, 0xd0}, {r1, 0x1}], 0x4, &(0x7f0000005b40)={r8, r9+10000000}, &(0x7f0000005b80)={0x101}, 0x8) setsockopt$sock_int(r7, 0x1, 0x1, &(0x7f0000005bc0)=0x800, 0x4) r10 = dup3(r0, r6, 0x80000) write$P9_RXATTRWALK(r4, &(0x7f0000005c00)={0xf, 0x1f, 0x1, 0x40}, 0xf) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000005c40)=@sack_info={0x0, 0xfffffffffffff800, 0x400}, &(0x7f0000005c80)=0xc) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000005cc0)={r11, 0xb50, 0x4, [0x7f, 0x6, 0xfff, 0x20]}, 0x10) getsockopt$inet_opts(r6, 0x0, 0xd, &(0x7f0000005d00)=""/165, &(0x7f0000005dc0)=0xa5) ioctl$VHOST_SET_LOG_FD(r10, 0x4004af07, &(0x7f0000005e00)=r10) 02:29:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = accept(r0, &(0x7f0000000000)=@sco, &(0x7f0000000080)=0x80) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f00000000c0), 0x2) r2 = dup2(r0, r1) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x78, r3, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x882c}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30, 0x1}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}]}, 0x78}, 0x1, 0x0, 0x0, 0x40041}, 0x4000) recvfrom$unix(r2, &(0x7f0000000280)=""/139, 0x8b, 0x10003, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x60080}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x118, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x70, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xbc}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xfffffffffffffc00}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x200}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30, 0x1}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x800}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x2c}}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x23}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x17}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}]}, 0x118}, 0x1, 0x0, 0x0, 0x4000}, 0x1) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000640)={r1, r2, 0x6, 0x61cc, &(0x7f00000005c0)="cfe20acc334d99572c9cd0c11ef5c43fd5f60f099dbc16f66c8e555fe44f4bf65e296ea0f437a1a46a0818ac23343a93f3b6d25f54cd5828be51a2f39b221d52c888fcc6138cbbbf1c84a7d35073626f6f3087b5851df56b4a9623538489e8268c220f6be5b644330ceafc1fb99f60cf441f939622c0efe3", 0x7fff, 0x2, 0x81, 0x100000000, 0x5, 0x0, 0x1000, "98b8893c135d673f3129eae6bda3c07ab5073c82a618b84d1703a8d80d638270fca6e91b424da3661ea70f005ddeb8890d2f07f155de56e41507115cd956da89878ceda2d6f1c0f283f1f2a12ffbceeeeb5f9e97da377cfcdda40596f2cbdb45a708abc025a3058304bd993c59c2da093282388be2fd0d3f2f1ec05f3d97bd459a371c50692ea834f8eede16dc970260aa1fe9139e79d1a56bcb27126b710370c762f94ab979cffb1256e5104f65f2cd24c08f962c922d0d8b9386ebe5f80845e1b858d3aa7f36eb930216b5e78d6129c0"}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000740)=[{0xc, 0x41bf}], 0x1) setsockopt$inet6_dccp_buf(r1, 0x21, 0x0, &(0x7f0000000780)="62603ae13c866db31c41c3d71dd643aa92090ca7ab16057f861063ab0c67dc3a2b57a3ec627140258a630c90db5d4e7edf79639eac0e05864d83b9bb0f95327ee70e49a7240b15ec3e2fcba639ddaf916c3c1720f3229e3631730596bfd9b358baed23215b1fe99b3b1011deb6789361bfe824d1de8b2ba58db7df4b48a5d0bd73b5c7db32de749be269ef1931ef99f9e7e8e7a6fcf1ee917f05c7e71d3860623f8c281a74390af2c8f162f3481b46ab4126008cc49b1881cebaac72976002090b445b8872fc63370b72", 0xca) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000880)={0x79, 0x0, [0x4, 0xfffffffeffffffff, 0xffff, 0x3d9]}) r4 = add_key$user(&(0x7f0000000900)='user\x00', &(0x7f0000000940)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000980)="584735a68fba79a51285c8a7109c00870e690325c4deee1cfafec02d410390a332474d5ef830b0fe77f1413959040ff88a372f764720e29bd6f84d6d5fdf2ac4dcd4faf1e5a19f694659aaec705fc9149ae59a2a8947642488a674119e67ccc345e2f2e49334d390a088984064", 0x6d, 0xfffffffffffffffc) keyctl$assume_authority(0x10, r4) getsockname(r0, &(0x7f0000000a00)=@xdp, &(0x7f0000000a80)=0x80) mlockall(0x3) r5 = syz_open_dev$mouse(&(0x7f0000000ac0)='/dev/input/mouse#\x00', 0x2, 0x8000) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000b00)=0x2, 0x4) ioctl$EVIOCGKEYCODE(r5, 0x80084504, &(0x7f0000000b40)=""/225) tee(r2, r2, 0x6168, 0x8) readahead(r2, 0x9, 0xfffffffffffffff8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000c40)={0x4, [0x4, 0xffffffff, 0x9, 0xffff]}, 0xc) ioctl$TIOCSLCKTRMIOS(r5, 0x5457, &(0x7f0000000c80)) write$P9_RRENAME(r5, &(0x7f0000000cc0)={0x7, 0x15, 0x1}, 0x7) openat$vnet(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8000002}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x60, r3, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x559}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x8000) setsockopt$inet_dccp_int(r2, 0x21, 0x6, &(0x7f0000000e80)=0x6, 0x4) getsockopt$inet_int(r1, 0x0, 0x1e, &(0x7f0000000ec0), &(0x7f0000000f00)=0x4) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000f40)={{0xa, 0x4e23, 0xfd, @loopback, 0x57c}, {0xa, 0x4e21, 0x8, @ipv4={[], [], @multicast2}, 0x2}, 0x5, [0x96, 0xfffffffffffffffd, 0x2, 0x8000, 0x0, 0x9a, 0x7fffffff, 0x5]}, 0x5c) getsockopt$nfc_llcp(r5, 0x118, 0x3, &(0x7f0000000fc0)=""/199, 0xc7) 02:29:22 executing program 6: r0 = dup(0xffffffffffffff9c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x1, 0x80000000, 0x1, 0x80, 0x5}) poll(&(0x7f0000000040)=[{r0, 0x20}, {r0, 0x1000}, {r0, 0xe008}, {r0, 0x8000}, {r0, 0x100}, {r0, 0x600}, {r0, 0x3}, {r0, 0x400}, {r0, 0x1400}], 0x9, 0xd6) prctl$setname(0xf, &(0x7f00000000c0)='${$}&\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@rand_addr, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f00000002c0)=0xe8) bind$xdp(r0, &(0x7f0000000300)={0x2c, 0x2, r1, 0x20, r0}, 0x10) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000340), 0x4) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000380)={0xff}) r3 = open(&(0x7f00000003c0)='./file0\x00', 0x400, 0x80) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000400)={'nat\x00'}, &(0x7f0000000480)=0x78) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0x18}, 0x4e20, 0x80000000, 0x4e21, 0x0, 0xa, 0xa0, 0x20, 0x7f, r1, r2}, {0x2, 0xfffffffffffffffb, 0x3a07, 0x401, 0x0, 0x3, 0xffffffffd34336f1, 0x1}, {0x0, 0x20, 0x4, 0xfffffffffffff000}, 0x5, 0x6e6bbd, 0x0, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0xf}, 0x4d4, 0x3f}, 0xa, @in6=@local, 0x3507, 0x3, 0x3, 0x7ff, 0x0, 0x1, 0x5}}, 0xe8) renameat(r3, &(0x7f00000005c0)='./file0\x00', r3, &(0x7f0000000600)='./file0\x00') openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vhost-vsock\x00', 0x2, 0x0) renameat(r0, &(0x7f0000000680)='./file0\x00', r0, &(0x7f00000006c0)='./file0\x00') setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x1, 0x4) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000700)=0xfffffffffffffeff, &(0x7f0000000740)=0x2) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f0000000780)=0x4) getsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f00000007c0), &(0x7f0000000800)=0x4) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x0, 0x4) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4) r4 = syz_open_dev$sndpcmc(&(0x7f0000000840)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffff7, 0x0) ioctl$FICLONE(r4, 0x40049409, r4) ioctl$KDSKBLED(r4, 0x4b65, 0x200) uname(&(0x7f0000000880)=""/190) timer_getoverrun(0x0) ioctl$sock_ifreq(r3, 0x8971, &(0x7f0000000940)={'bcsf0\x00', @ifru_mtu=0x2}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000980)={@mcast1, 0x1f, r1}) fanotify_mark(r3, 0xb4, 0x23, r3, &(0x7f00000009c0)='./file0\x00') ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000a00)={'team0\x00', r1}) 02:29:22 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x9}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0xc2be, 0x2, 0x8001, 0x9, r1}, 0x10) getsockopt$packet_buf(r0, 0x107, 0x2, &(0x7f0000000100)=""/176, &(0x7f00000001c0)=0xb0) ioctl$sock_ifreq(r0, 0x8977, &(0x7f0000000200)={'erspan0\x00', @ifru_addrs=@ethernet={0x6, @random="c339a9a85d09"}}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x1, 0x0) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000280)={0x6, 0x6, 0x3}) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f00000002c0)=""/27, &(0x7f0000000300)=0x1b) r3 = memfd_create(&(0x7f0000000340)='(posix_acl_access\x00', 0x1) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000680)=@broute={'broute\x00', 0x20, 0x1, 0x2a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200003c0], 0x0, &(0x7f0000000380), &(0x7f00000003c0)=[{}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{{{0x0, 0x8, 0x6005, 'sit0\x00', 'bond_slave_0\x00', 'bond_slave_0\x00', 'syzkaller0\x00', @local, [0x0, 0x0, 0xff], @local, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0x120, 0x1c8, 0x218, [@time={'time\x00', 0x18, {{0x80000000, 0x1, 0xa517, 0x14402, 0x6, 0xcc0}}}, @rateest={'rateest\x00', 0x48, {{'lo\x00', 'bridge_slave_1\x00', 0x8, 0x3, 0x1, 0x1, 0x7, 0xffffffffffffffc1, 0x0, 0x6}}}]}, [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x7ff, 0xd18b, 0x4, 0x0, 0x0, "5357a4aad229e61064ae5f675ab75429ac03db0c65e1d776a0d342ebf9c3287c4885c86cf43b86f777227b81f557855155ca4c70284a6161b40edd286b09b0e9"}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x5, 'syz1\x00', 0x4c0}}}}]}, {0x0, '\x00', 0x1}]}, 0x320) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f0000000700)=0x400) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000740)={0xcfc0, 0x7, 0x0, 0x3}, 0x8) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000780), &(0x7f00000007c0)=0x8) r4 = socket$inet_dccp(0x2, 0x6, 0x0) r5 = getpgid(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000800)=0x4) ioctl$FICLONE(r4, 0x40049409, r4) sendmmsg$alg(r0, &(0x7f0000000ac0)=[{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000840)="11d937f4a825a2ac9bc48ed843c95b4fde00abb56d425e747ab9e5ebc766dd23e002dd9e36ab653e4f6237f765fee1d25770068d0361a599ae3bc3385533df46b358b1a6b12cd7aa06ddc3b533d42cb9c4355ba2679e489b33530457cdf35acb58847aed2f1ad7e055ddcc8b58be1fd838f0aeabeced036c04bd36f5c80db3cf19f9e20efd0c7f6a09871fd7152f04ba62ff6eb3f0058d85e51df8db2cf714e1bcd06eb820d890a184e165", 0xab}, {&(0x7f0000000900)="8d9dd31dff3f57f2bc615146c0937d0a7c47e2834a58054f051d240a384d03e8182026c879434e7b113e585ecb1afca2b70a6d7a0d7e3fd52766ab6520a6e423ea5f8e24a774da01fffe0c2d269f527dc4bedf3158283af6bd4473ef62f88f9ef2", 0x61}, {&(0x7f0000000980)="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", 0xfd}], 0x3, 0x0, 0x0, 0x40084}], 0x1, 0x20000000) sysfs$1(0x1, &(0x7f0000000b00)='md5sumem1^$selfproc-,wlan0wlan0selinux\x00') ioctl$SG_IO(r2, 0x2285, &(0x7f0000000e40)={0xb5064c321d2638ea, 0xfffffffffffffffb, 0xce, 0x40008000000, @scatter={0x3, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000b40)=""/42, 0x2a}, {&(0x7f0000000b80)=""/120, 0x78}, {&(0x7f0000000c00)=""/74, 0x4a}]}, &(0x7f0000000cc0)="106ab312453a7407084bf04074f277052d04d74961bf8a2eed1a87e803602e34b4ac95be8c8cf6e9e3f541736c797f60833e9b916ced8fb12e1b883160111352e8be182177ebd67536c07c058d92e514662c96815d0172f87d7eae840ad8b7c99e431ac167dece6964ad9ee7774b93b5161548344064ae96bb6db765658a507d7c37218c6717e9fbdd01170b9fe5cad0587caea604448339cfd53d8f410b803b815d315829f4c28f9c717072b785d30e659c3770ef91ef8439ccddfe25d9e64027269fbb31b8277830b76962c312", &(0x7f0000000dc0)=""/52, 0xc84, 0x10010, 0x3, &(0x7f0000000e00)}) write$binfmt_elf64(r3, &(0x7f0000000ec0)={{0x7f, 0x45, 0x4c, 0x46, 0xa1, 0x0, 0x8, 0x5, 0x2, 0x311a9a3ad36292bf, 0x3e, 0x6, 0x22d, 0x40, 0x237, 0x9, 0x0, 0x38, 0x1, 0x3f, 0x5, 0x8000}, [{0x0, 0x3f, 0x1, 0x5, 0x7fff, 0x7, 0x7, 0x4}, {0x5, 0x0, 0x26, 0xffff, 0x7, 0x4, 0xe2, 0x4}], "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", [[], [], [], [], [], [], [], [], [], []]}, 0x1ab0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000002980)=r1, 0x4) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f00000029c0)={r1, 0x20, 0x28000}, 0x8) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f0000002a00)={0x7, 0x33}) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000002a40)=0x12, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000002ac0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002a80)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000002b00)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, [], 0x10}, 0x2}, {0xa, 0x4e21, 0xabda, @empty, 0x800}, r6, 0x800}}, 0x48) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000002b80)={r1, 0x5, 0xba, "6ab50637a8784d5e823d5a9bd0290cb2720a36d77c73bce2066598e01d7bbab238b5700147a7623602674399c430ecfade4d1a1fe07092a35a200c43b9ed8946886c488abef840a6576fc50e5591367082433dd75070fbf32184b94cb80af01a07a515f4676439d3f9fba456a8ea4699f98f5ec22955d591444900c5c6cc68c997f1c7c81f71687ad42607844193b3fdc50fb2fb2a1f0b3948ac2db1ae1a523ed6b56924cd76261bd25245c88d5d3a1ded7a5e081525fece7338"}, 0xc2) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/uinput\x00', 0x40, 0x0) signalfd(r7, &(0x7f0000002cc0)={0x10001}, 0x8) 02:29:22 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RCLUNK(r1, &(0x7f0000000040)={0x7, 0x79, 0x1}, 0x7) write$P9_RATTACH(r1, &(0x7f0000000080)={0x14, 0x69, 0x2, {0x40, 0x1, 0x5}}, 0x14) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x0, &(0x7f00000000c0)}) r2 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x4, 0x800) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f00000001c0)=0x7, 0x4) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000200)={0x10000}, 0x1) ioctl$TIOCGPTPEER(r2, 0x5441, 0x80) r3 = dup2(r2, r0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='romfs\x00', 0x810800, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000300)={{{@in6, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000400)=0xe8) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000440)={@remote, @remote, @remote, 0x100000000, 0x3, 0x4d7f, 0x100, 0x9, 0x100000, r4}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f00000004c0)="75743f7ace321e4425c13ba76045357f", 0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000500)={0x0, 0x1, 0x20, 0x0, 0x549d}, &(0x7f0000000540)=0x18) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000580)=r5, 0x4) sendmsg(r3, &(0x7f00000008c0)={&(0x7f00000005c0)=@ipx={0x4, 0x1, 0x0, "56cbb3dbca2c", 0xe6}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000640)="a00e83d4bdd5c45cc465d510c31dbf906c7e0eae4f36fe19f5fcc9d71874c4c6b39faff408f42a73be1229f843751d00c732d80eac6bc9b36c7dec5efe0c59e143f9e9d81749b58419022fb07046b6a0ff7a17072313ab698cea", 0x5a}, {&(0x7f00000006c0)="6a57b37bc8f1a93a335914c17e2400b1ba12b69e078506b4f66d88a30902958416dcfb8de7be29c8c5d8d6a08dfa67b1dc8c62951214d5597e894702e1c86a8c4d", 0x41}], 0x2, &(0x7f0000000780)=[{0x18, 0xff, 0x258ad9af, "90e95aa5c8"}, {0xf0, 0x1ad, 0x0, "10d40edc19cd81758d922e630c39531a828cbf947f212ea0439a828ffeb0e59971e34910386fb33d9a0bb471fe20616634e66cabd74257ba5042cfadc41e2d43ac3ce7d543ff7b56ede88d74415667f4e449e756ff8729586a4f34e44779aae92fcdb8675c4f215cb7b745200b1de9a8cf320cbf9693ae0819bcf4037efd6cffccebf1aef7e5717a4881b1782c7870e627a59500a5c0ee552ac53acafa0a9df6a23393649857fd8163a5c5f9b1be96d7bfa7c0cd61bb75f07c69c909abd0bdf6bd590c1a95ec073158437c632d2c3827fb63739969f0bd65c20d5c720a68"}], 0x108, 0x80}, 0xc000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000900)={'team0\x00', 0x8000}) fchdir(r2) mkdirat(r3, &(0x7f0000000940)='./file0\x00', 0x8) pipe2$9p(&(0x7f0000000980), 0x84000) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f00000009c0)) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000a00)={0x28, 0x2, 0x0, {0x2, 0x6, 0x40}}, 0x28) setsockopt$inet6_tcp_buf(r3, 0x6, 0x1d, &(0x7f0000000a40)="6d13eab70085c27046c790197c4e024fd4f88d9c524c9118fc2e7c08c73ed3f834ead7477348aabed43988389d71036f3f4852974de7da11fba72039e065e19a0526cb1123ad2b8eb83e7084d92841bd61d3b09ed3ff6f317af50c2340c8b319d46395b3b1ee2b10dabe285c870fb2a113e78efc9b59a18ed1c9335b9d734670c169b0a0643a7bf301ef46dbf7858ce52841", 0x92) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000b80)={0x16, 0x98, 0xfa00, {&(0x7f0000000b40)={0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0x30, 0x1, @in6={0xa, 0x4e20, 0x0, @loopback, 0x100000000}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000c40)={0x11, 0x10, 0xfa00, {&(0x7f0000000b00), r6}}, 0x18) socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$inet_int(r3, 0x0, 0x7, &(0x7f0000000c80), &(0x7f0000000cc0)=0x4) getsockopt$inet6_tcp_int(r2, 0x6, 0x15, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000e40)={r2, &(0x7f0000000d80)="c20d86a121e7092f7528f6d5618dba43359ecf6216aa462a97a5a1ed8b2a1c1c566d1a2f81af9d515048ff9586d25219628b1ae2f6d7a96fbad3f91be6813cdef386eda20158d9325c0e54204d11b9dd5ce01b54f35beface5821cc0c0fd85bcdc299d866073b187e1e9f16d281fb3a1febbff03e5d3728a84a8572a40760ef1344445b4e079adabba71"}, 0x10) [ 92.377040] IPVS: ftp: loaded support on port[0] = 21 [ 92.377923] IPVS: ftp: loaded support on port[0] = 21 [ 92.409331] IPVS: ftp: loaded support on port[0] = 21 [ 92.409878] IPVS: ftp: loaded support on port[0] = 21 [ 92.429339] IPVS: ftp: loaded support on port[0] = 21 [ 92.440984] IPVS: ftp: loaded support on port[0] = 21 [ 92.444345] IPVS: ftp: loaded support on port[0] = 21 [ 92.459122] IPVS: ftp: loaded support on port[0] = 21 [ 94.021683] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.028084] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.052648] device bridge_slave_0 entered promiscuous mode [ 94.090762] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.097165] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.115183] device bridge_slave_0 entered promiscuous mode [ 94.128898] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.135275] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.144247] device bridge_slave_0 entered promiscuous mode [ 94.151330] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.157784] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.167688] device bridge_slave_0 entered promiscuous mode [ 94.175786] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.182136] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.189766] device bridge_slave_1 entered promiscuous mode [ 94.197238] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.203645] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.217489] device bridge_slave_0 entered promiscuous mode [ 94.226651] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.233017] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.241641] device bridge_slave_0 entered promiscuous mode [ 94.252230] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.258594] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.268660] device bridge_slave_1 entered promiscuous mode [ 94.275609] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.282007] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.289667] device bridge_slave_0 entered promiscuous mode [ 94.296370] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.302737] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.310071] device bridge_slave_0 entered promiscuous mode [ 94.318841] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.325190] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.332443] device bridge_slave_1 entered promiscuous mode [ 94.339860] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 94.346948] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.353301] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.370615] device bridge_slave_1 entered promiscuous mode [ 94.381401] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.387777] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.395889] device bridge_slave_1 entered promiscuous mode [ 94.403610] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 94.411977] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.418365] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.425396] device bridge_slave_1 entered promiscuous mode [ 94.438904] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 94.445910] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.452285] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.459351] device bridge_slave_1 entered promiscuous mode [ 94.465788] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.472153] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.494730] device bridge_slave_1 entered promiscuous mode [ 94.502336] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 94.510484] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 94.519327] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 94.531644] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 94.540262] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 94.547432] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 94.619237] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 94.626590] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 94.643194] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 94.656681] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 94.671969] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 94.679900] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 94.723640] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 94.753341] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 94.843071] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 94.856755] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 94.907081] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 94.915372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 94.936737] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 94.977445] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 94.988890] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 95.003858] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 95.014282] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 95.037330] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 95.056709] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 95.079798] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 95.099040] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 95.114075] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 95.128168] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 95.140296] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 95.220326] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 95.319632] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 95.336459] team0: Port device team_slave_0 added [ 95.441696] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 95.449761] team0: Port device team_slave_1 added [ 95.550532] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 95.563984] team0: Port device team_slave_0 added [ 95.579574] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 95.588401] team0: Port device team_slave_0 added [ 95.595347] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 95.603074] team0: Port device team_slave_0 added [ 95.611890] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 95.618813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 95.626909] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 95.649554] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 95.657123] team0: Port device team_slave_0 added [ 95.662370] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 95.669905] team0: Port device team_slave_0 added [ 95.676834] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 95.684299] team0: Port device team_slave_0 added [ 95.696108] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 95.711941] team0: Port device team_slave_1 added [ 95.720865] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 95.730406] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 95.746312] team0: Port device team_slave_1 added [ 95.759071] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 95.772066] team0: Port device team_slave_1 added [ 95.777232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 95.789937] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 95.804583] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 95.812629] team0: Port device team_slave_1 added [ 95.819719] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 95.826781] team0: Port device team_slave_1 added [ 95.834628] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 95.844433] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 95.851742] team0: Port device team_slave_0 added [ 95.869478] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 95.877027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.889068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.908889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 95.919084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 95.929548] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 95.936661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 95.944311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 95.952794] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 95.961649] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 95.969158] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 95.981452] team0: Port device team_slave_1 added [ 95.991479] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 95.998790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.013512] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.030152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.037788] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.045120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.052733] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.060245] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 96.067273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.075277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.084327] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 96.092194] team0: Port device team_slave_1 added [ 96.098518] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 96.105516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.115093] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.125983] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 96.134679] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 96.142557] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 96.151845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.164966] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.187502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.203330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.210828] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.218728] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.227803] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 96.235009] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 96.243232] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 96.257042] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 96.268928] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.294015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.314965] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.322825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.330409] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.337835] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.345497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.353089] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.360775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.369305] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 96.376624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.385337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.394535] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 96.408347] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 96.416079] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 96.425756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.446082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.464225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.478033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.485862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.493428] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.500900] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.510557] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 96.518752] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 96.538144] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 96.545454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.557786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.583170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.609012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.616761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.624623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.633424] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 96.641039] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.649814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.672244] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 96.680705] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 96.687910] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.700218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.720053] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.738612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.750388] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 96.759264] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 96.769364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.796162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.818529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.827352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.848220] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 96.857650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.871757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 97.272148] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.278619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.285242] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.291587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.310098] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 97.598840] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.605222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.611849] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.618213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.629868] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 97.642478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.653591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.686053] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.692431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.699047] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.705401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.727008] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 97.736914] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.743270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.749880] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.756222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.767575] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 97.879937] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.886330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.892958] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.899319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.922548] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 97.934732] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.941109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.947735] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.954102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.988347] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 97.995193] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.001564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.008175] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.014521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.021632] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 98.030277] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.036644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.043261] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.049602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.056807] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 98.647720] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.658123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.675641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.683118] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.690654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.697838] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 101.448792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.602949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.626434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.651147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.736512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.770889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.853009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.873100] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 101.889329] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 101.942695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.981135] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 102.051054] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 102.097740] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 102.147063] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 102.219001] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 102.225240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.235084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.258906] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 102.278575] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 102.284736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.305904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.340161] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 102.349535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.368004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.391606] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 102.488991] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 102.499761] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 102.506166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.517870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.542986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.557930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.571013] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 102.581196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.608867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.626837] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.654951] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.711096] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 102.717386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.725929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.757092] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.846330] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 102.852574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.861012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.874479] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.899949] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.980108] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.168928] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.184207] 8021q: adding VLAN 0 to HW filter on device team0 02:29:35 executing program 3: r0 = add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000300), 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000006300)='keyring\x00', &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000), 0x0, 0x0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400218) r4 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000b00), &(0x7f00000000c0)="7f", 0x1, r2) clock_gettime(0x2, &(0x7f00000002c0)) r5 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f0000000100), &(0x7f0000000280), 0x23e, r0) keyctl$dh_compute(0x17, &(0x7f0000000340)={r4, r5, r5}, &(0x7f0000000600)=""/132, 0xff33, 0x0) 02:29:35 executing program 2: seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50f53}]}) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000)) [ 104.882834] ================================================================== [ 104.890263] BUG: KASAN: slab-out-of-bounds in crypto_dh_encode_key+0x670/0x830 [ 104.897652] Write of size 574 at addr ffff8801cad9e6d3 by task syz-executor3/6365 [ 104.905252] [ 104.906876] CPU: 0 PID: 6365 Comm: syz-executor3 Not tainted 4.18.0-rc7-next-20180803+ #31 [ 104.915320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 104.924657] Call Trace: [ 104.927235] dump_stack+0x1c9/0x2b4 [ 104.930860] ? dump_stack_print_info.cold.2+0x52/0x52 [ 104.936126] ? printk+0xa7/0xcf [ 104.939389] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 104.944136] ? crypto_dh_encode_key+0x670/0x830 [ 104.948792] print_address_description+0x6c/0x20b [ 104.953619] ? crypto_dh_encode_key+0x670/0x830 [ 104.958268] kasan_report.cold.7+0x242/0x30d [ 104.962658] check_memory_region+0x13e/0x1b0 [ 104.967048] memcpy+0x37/0x50 [ 104.970152] crypto_dh_encode_key+0x670/0x830 [ 104.974636] ? crypto_dh_decode_key+0x820/0x820 [ 104.979288] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 104.984807] ? __keyctl_dh_compute+0x6e1/0x1c00 [ 104.989465] __keyctl_dh_compute+0x707/0x1c00 [ 104.993946] ? __switch_to_asm+0x34/0x70 [ 104.997998] ? __switch_to_asm+0x40/0x70 [ 105.002040] ? __switch_to_asm+0x34/0x70 [ 105.006087] ? __switch_to_asm+0x40/0x70 [ 105.010129] ? __switch_to_asm+0x34/0x70 [ 105.014171] ? __switch_to_asm+0x40/0x70 [ 105.018223] ? __schedule+0x884/0x1ec0 [ 105.022091] ? copy_overflow+0x30/0x30 [ 105.025957] ? __sched_text_start+0x8/0x8 [ 105.030084] ? save_stack+0x43/0xd0 [ 105.033706] ? __kasan_slab_free+0x11a/0x170 [ 105.038095] ? kfree+0xd9/0x260 [ 105.041359] ? __x64_sys_add_key+0x2b7/0x4e0 [ 105.045751] ? do_syscall_64+0x1b9/0x820 [ 105.049808] ? kasan_check_read+0x11/0x20 [ 105.053950] ? do_raw_spin_unlock+0xa7/0x2f0 [ 105.058342] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 105.062904] ? kasan_check_write+0x14/0x20 [ 105.067124] ? trace_hardirqs_off+0xd/0x10 [ 105.071345] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 105.076442] ? schedule+0xfb/0x450 [ 105.079965] ? __schedule+0x1ec0/0x1ec0 [ 105.083919] ? trace_hardirqs_off+0xd/0x10 [ 105.088143] ? quarantine_put+0x10d/0x1b0 [ 105.092275] keyctl_dh_compute+0xc5/0x11f [ 105.096403] ? __keyctl_dh_compute+0x1c00/0x1c00 [ 105.101141] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 105.106661] ? exit_to_usermode_loop+0x1f4/0x380 [ 105.111400] ? syscall_slow_exit_work+0x500/0x500 [ 105.116237] __x64_sys_keyctl+0x12a/0x3b0 [ 105.120367] do_syscall_64+0x1b9/0x820 [ 105.124238] ? syscall_return_slowpath+0x5e0/0x5e0 [ 105.129150] ? syscall_return_slowpath+0x31d/0x5e0 [ 105.134061] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 105.139062] ? prepare_exit_to_usermode+0x291/0x3b0 [ 105.144061] ? perf_trace_sys_enter+0xb10/0xb10 [ 105.148714] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 105.153548] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 105.158719] RIP: 0033:0x456b29 [ 105.161897] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 105.180779] RSP: 002b:00007f2b24487c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 105.188472] RAX: ffffffffffffffda RBX: 00007f2b244886d4 RCX: 0000000000456b29 [ 105.195722] RDX: 0000000020000600 RSI: 0000000020000340 RDI: 0000000000000017 [ 105.202972] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 105.210230] R10: 000000000000ff33 R11: 0000000000000246 R12: 00000000ffffffff [ 105.217482] R13: 00000000004d16a0 R14: 00000000004c7069 R15: 0000000000000000 [ 105.224734] [ 105.226339] Allocated by task 6365: [ 105.229950] save_stack+0x43/0xd0 [ 105.233381] kasan_kmalloc+0xc4/0xe0 [ 105.237078] __kmalloc+0x14e/0x760 [ 105.240600] __keyctl_dh_compute+0x6e1/0x1c00 [ 105.245075] keyctl_dh_compute+0xc5/0x11f [ 105.249204] __x64_sys_keyctl+0x12a/0x3b0 [ 105.253338] do_syscall_64+0x1b9/0x820 [ 105.257208] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 105.262370] [ 105.263975] Freed by task 5155: [ 105.267234] save_stack+0x43/0xd0 [ 105.270667] __kasan_slab_free+0x11a/0x170 [ 105.274894] kasan_slab_free+0xe/0x10 [ 105.278677] kfree+0xd9/0x260 [ 105.281764] kvfree+0x61/0x70 [ 105.284850] __free_fdtable+0x31/0x70 [ 105.288630] put_files_struct+0x31d/0x3c0 [ 105.292756] exit_files+0x83/0xb0 [ 105.296186] do_exit+0xf7e/0x2760 [ 105.299618] do_group_exit+0x177/0x440 [ 105.303486] __x64_sys_exit_group+0x3e/0x50 [ 105.307790] do_syscall_64+0x1b9/0x820 [ 105.311660] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 105.316826] [ 105.318441] The buggy address belongs to the object at ffff8801cad9e480 [ 105.318441] which belongs to the cache kmalloc-2048 of size 2048 [ 105.331253] The buggy address is located 595 bytes inside of [ 105.331253] 2048-byte region [ffff8801cad9e480, ffff8801cad9ec80) [ 105.343198] The buggy address belongs to the page: [ 105.348107] page:ffffea00072b6780 count:1 mapcount:0 mapping:ffff8801dac00c40 index:0x0 compound_mapcount: 0 [ 105.358054] flags: 0x2fffc0000008100(slab|head) [ 105.362709] raw: 02fffc0000008100 ffffea0006a20788 ffffea0006a22408 ffff8801dac00c40 [ 105.370571] raw: 0000000000000000 ffff8801cad9e480 0000000100000003 0000000000000000 [ 105.378426] page dumped because: kasan: bad access detected [ 105.384110] [ 105.385713] Memory state around the buggy address: [ 105.390630] ffff8801cad9e800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 105.397979] ffff8801cad9e880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 105.405318] >ffff8801cad9e900: 00 05 fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 105.412664] ^ [ 105.416269] ffff8801cad9e980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 105.423616] ffff8801cad9ea00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 105.430947] ================================================================== [ 105.439316] Kernel panic - not syncing: panic_on_warn set ... [ 105.439316] [ 105.446695] CPU: 0 PID: 6365 Comm: syz-executor3 Tainted: G B 4.18.0-rc7-next-20180803+ #31 [ 105.456478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 105.465829] Call Trace: [ 105.468423] dump_stack+0x1c9/0x2b4 [ 105.472055] ? dump_stack_print_info.cold.2+0x52/0x52 [ 105.477252] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 105.482011] panic+0x238/0x4e7 [ 105.485670] ? add_taint.cold.5+0x16/0x16 [ 105.489823] ? do_raw_spin_unlock+0xa7/0x2f0 [ 105.494230] ? do_raw_spin_unlock+0xa7/0x2f0 [ 105.498643] ? crypto_dh_encode_key+0x670/0x830 [ 105.503313] kasan_end_report+0x47/0x4f [ 105.507286] kasan_report.cold.7+0x76/0x30d [ 105.511608] check_memory_region+0x13e/0x1b0 [ 105.516024] memcpy+0x37/0x50 [ 105.519141] crypto_dh_encode_key+0x670/0x830 [ 105.523637] ? crypto_dh_decode_key+0x820/0x820 [ 105.528305] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 105.533839] ? __keyctl_dh_compute+0x6e1/0x1c00 [ 105.538514] __keyctl_dh_compute+0x707/0x1c00 [ 105.543009] ? __switch_to_asm+0x34/0x70 [ 105.547059] ? __switch_to_asm+0x40/0x70 [ 105.551099] ? __switch_to_asm+0x34/0x70 [ 105.555140] ? __switch_to_asm+0x40/0x70 [ 105.559181] ? __switch_to_asm+0x34/0x70 [ 105.563224] ? __switch_to_asm+0x40/0x70 [ 105.567268] ? __schedule+0x884/0x1ec0 [ 105.571140] ? copy_overflow+0x30/0x30 [ 105.575008] ? __sched_text_start+0x8/0x8 [ 105.579137] ? save_stack+0x43/0xd0 [ 105.582743] ? __kasan_slab_free+0x11a/0x170 [ 105.587133] ? kfree+0xd9/0x260 [ 105.590396] ? __x64_sys_add_key+0x2b7/0x4e0 [ 105.594805] ? do_syscall_64+0x1b9/0x820 [ 105.598861] ? kasan_check_read+0x11/0x20 [ 105.602989] ? do_raw_spin_unlock+0xa7/0x2f0 [ 105.607376] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 105.611939] ? kasan_check_write+0x14/0x20 [ 105.616160] ? trace_hardirqs_off+0xd/0x10 [ 105.620380] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 105.625469] ? schedule+0xfb/0x450 [ 105.629001] ? __schedule+0x1ec0/0x1ec0 [ 105.632967] ? trace_hardirqs_off+0xd/0x10 [ 105.637187] ? quarantine_put+0x10d/0x1b0 [ 105.641322] keyctl_dh_compute+0xc5/0x11f [ 105.645453] ? __keyctl_dh_compute+0x1c00/0x1c00 [ 105.650197] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 105.655735] ? exit_to_usermode_loop+0x1f4/0x380 [ 105.660478] ? syscall_slow_exit_work+0x500/0x500 [ 105.665308] __x64_sys_keyctl+0x12a/0x3b0 [ 105.669440] do_syscall_64+0x1b9/0x820 [ 105.673315] ? syscall_return_slowpath+0x5e0/0x5e0 [ 105.678227] ? syscall_return_slowpath+0x31d/0x5e0 [ 105.683142] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 105.688143] ? prepare_exit_to_usermode+0x291/0x3b0 [ 105.693151] ? perf_trace_sys_enter+0xb10/0xb10 [ 105.697811] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 105.702638] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 105.707807] RIP: 0033:0x456b29 [ 105.710993] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 105.729874] RSP: 002b:00007f2b24487c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 105.737563] RAX: ffffffffffffffda RBX: 00007f2b244886d4 RCX: 0000000000456b29 [ 105.744812] RDX: 0000000020000600 RSI: 0000000020000340 RDI: 0000000000000017 [ 105.752064] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 105.759315] R10: 000000000000ff33 R11: 0000000000000246 R12: 00000000ffffffff [ 105.766566] R13: 00000000004d16a0 R14: 00000000004c7069 R15: 0000000000000000 [ 105.774261] Dumping ftrace buffer: [ 105.777780] (ftrace buffer empty) [ 105.781470] Kernel Offset: disabled [ 105.785082] Rebooting in 86400 seconds..