INIT: Entering runlevel: 2

[info] Using makefile-style concurrent boot in runlevel 2.
[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.0.13' (ECDSA) to the list of known hosts.
2018/04/06 22:52:08 fuzzer started
2018/04/06 22:52:08 dialing manager at 10.128.0.26:38639
2018/04/06 22:52:14 kcov=true, comps=false
2018/04/06 22:52:17 executing program 0:
perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x7c}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x0)

2018/04/06 22:52:17 executing program 2:
setrlimit(0x7, &(0x7f0000000080))
epoll_create(0x7)

2018/04/06 22:52:17 executing program 7:
clone(0x89000300, &(0x7f0000000200), &(0x7f00000001c0), &(0x7f0000000280), &(0x7f0000001000))

2018/04/06 22:52:17 executing program 3:
perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unshare(0x8000000)
socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000003c0))
r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x2})
readv(r0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/199, 0xc7}], 0x1)

2018/04/06 22:52:17 executing program 5:
syz_open_dev$sg(&(0x7f0000961000)='/dev/sg#\x00', 0x0, 0x0)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@rand_addr, @broadcast=0xffffffff, @dev={0xac, 0x14}}, 0xc)
rt_sigaction(0x7, &(0x7f0000000000)={0xffffffffffffff0f}, &(0x7f0000d4efe8), 0x8, &(0x7f0000312ff8))
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0)
syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x0, 0x0)

2018/04/06 22:52:17 executing program 6:
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000005580)='./cgroup.net\x00', 0x200002, 0x0)
fchdir(r1)
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[], 0xfffffce5)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000040)={0x10})
getresuid(&(0x7f0000000240), &(0x7f0000000280)=<r3=>0x0, &(0x7f0000000340))
chown(&(0x7f0000000200)='./file0\x00', r3, 0x0)
fchmod(r2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000005380), 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00')
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x10, 0xffffffffffffffff, 0x0)

2018/04/06 22:52:17 executing program 1:
set_tid_address(&(0x7f00000000c0))

2018/04/06 22:52:17 executing program 4:
open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000005580)='./cgroup.net\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
write$cgroup_pid(r1, &(0x7f0000000580)=ANY=[], 0xfffffce5)
fchmod(r1, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000005380), 0x0, 0x0, 0x0)
clone(0x0, &(0x7f0000f88000), &(0x7f00002b0ffc), &(0x7f0000714ffc), &(0x7f0000e1bf43))
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x400080}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000066c0)=[{{&(0x7f00000002c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}}}, 0x80, &(0x7f0000000940), 0x0, &(0x7f0000000980)=""/4096, 0x1000}}], 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x10, 0xffffffffffffffff, 0x0)

syzkaller login: [   42.649528] ip (3743) used greatest stack depth: 54688 bytes left
[   43.039761] ip (3779) used greatest stack depth: 54672 bytes left
[   43.493629] ip (3822) used greatest stack depth: 54312 bytes left
[   44.562233] ip (3920) used greatest stack depth: 54200 bytes left
[   46.286408] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   46.335976] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   46.345821] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   46.550953] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   46.603153] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   46.778524] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   46.802418] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   46.876454] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   55.142249] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   55.304652] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   55.369928] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   55.471242] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   55.710385] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   55.729705] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   55.863390] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   55.885732] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   55.926741] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   55.933079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   55.943180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   56.014167] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   56.020422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   56.036593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   56.123089] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   56.129381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   56.142751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   56.305948] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   56.312430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   56.328602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   56.557560] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   56.563886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   56.575155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   56.606261] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   56.617501] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   56.633548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   56.664984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   56.696306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   56.722728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   56.801987] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   56.810222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   56.821605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
2018/04/06 22:52:35 executing program 0:

2018/04/06 22:52:35 executing program 2:
perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x10, 0xffffffffffffffff, 0x0)
clock_adjtime(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9})

2018/04/06 22:52:35 executing program 3:

2018/04/06 22:52:35 executing program 7:

2018/04/06 22:52:35 executing program 1:

2018/04/06 22:52:35 executing program 5:

2018/04/06 22:52:35 executing program 4:
open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000005580)='./cgroup.net\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
write$cgroup_pid(r1, &(0x7f0000000580)=ANY=[], 0xfffffce5)
fchmod(r1, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000005380), 0x0, 0x0, 0x0)
clone(0x0, &(0x7f0000f88000), &(0x7f00002b0ffc), &(0x7f0000714ffc), &(0x7f0000e1bf43))
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x400080}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000066c0)=[{{&(0x7f00000002c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}}}, 0x80, &(0x7f0000000940), 0x0, &(0x7f0000000980)=""/4096, 0x1000}}], 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x10, 0xffffffffffffffff, 0x0)

2018/04/06 22:52:35 executing program 6:
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000005580)='./cgroup.net\x00', 0x200002, 0x0)
fchdir(r1)
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[], 0xfffffce5)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000040)={0x10})
getresuid(&(0x7f0000000240), &(0x7f0000000280)=<r3=>0x0, &(0x7f0000000340))
chown(&(0x7f0000000200)='./file0\x00', r3, 0x0)
fchmod(r2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000005380), 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00')
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x10, 0xffffffffffffffff, 0x0)

2018/04/06 22:52:35 executing program 5:

2018/04/06 22:52:35 executing program 0:

2018/04/06 22:52:35 executing program 1:

2018/04/06 22:52:35 executing program 7:

2018/04/06 22:52:35 executing program 3:

2018/04/06 22:52:35 executing program 2:

2018/04/06 22:52:36 executing program 5:

2018/04/06 22:52:36 executing program 1:

2018/04/06 22:52:36 executing program 3:

2018/04/06 22:52:36 executing program 0:

2018/04/06 22:52:36 executing program 7:

2018/04/06 22:52:36 executing program 2:

2018/04/06 22:52:36 executing program 6:

2018/04/06 22:52:36 executing program 4:
open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000005580)='./cgroup.net\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
write$cgroup_pid(r1, &(0x7f0000000580)=ANY=[], 0xfffffce5)
fchmod(r1, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000005380), 0x0, 0x0, 0x0)
clone(0x0, &(0x7f0000f88000), &(0x7f00002b0ffc), &(0x7f0000714ffc), &(0x7f0000e1bf43))
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x400080}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000066c0)=[{{&(0x7f00000002c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}}}, 0x80, &(0x7f0000000940), 0x0, &(0x7f0000000980)=""/4096, 0x1000}}], 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x10, 0xffffffffffffffff, 0x0)

2018/04/06 22:52:36 executing program 2:

2018/04/06 22:52:36 executing program 5:

2018/04/06 22:52:36 executing program 0:

2018/04/06 22:52:36 executing program 1:

2018/04/06 22:52:36 executing program 3:

2018/04/06 22:52:36 executing program 7:

2018/04/06 22:52:36 executing program 6:

2018/04/06 22:52:36 executing program 1:

2018/04/06 22:52:36 executing program 5:

2018/04/06 22:52:37 executing program 0:
r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket(0x2, 0x1, 0x0)
listen(r1, 0x0)
accept4(r1, &(0x7f00002c0fec)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00003bd000)=0x5f, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000))
dup3(r0, r1, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f00000001c0))
tkill(r2, 0x1000000000013)

2018/04/06 22:52:37 executing program 2:

2018/04/06 22:52:37 executing program 3:

2018/04/06 22:52:37 executing program 7:

2018/04/06 22:52:37 executing program 6:

2018/04/06 22:52:37 executing program 1:

2018/04/06 22:52:37 executing program 4:
mkdir(&(0x7f0000639000)='./file0\x00', 0x0)
truncate(&(0x7f0000000000)='./file0\x00', 0x0)

2018/04/06 22:52:37 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0)
io_setup(0x5, &(0x7f0000000000)=<r1=>0x0)
fchdir(r0)
r2 = creat(&(0x7f00000005c0)='./file1\x00', 0x0)
dup3(r2, r0, 0x0)
fcntl$setstatus(r0, 0x4, 0x4c00)
io_submit(r1, 0x1, &(0x7f00000006c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000180)}])

2018/04/06 22:52:37 executing program 2:

2018/04/06 22:52:37 executing program 3:

2018/04/06 22:52:37 executing program 1:

2018/04/06 22:52:37 executing program 6:

2018/04/06 22:52:37 executing program 7:

2018/04/06 22:52:37 executing program 2:
io_submit(0x0, 0x0, &(0x7f0000000480))

2018/04/06 22:52:37 executing program 5:
perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000040), 0x0, 0x0, &(0x7f0000001ff0), &(0x7f0000000ffc), 0x0)

2018/04/06 22:52:37 executing program 4:
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1c)
sync()

2018/04/06 22:52:38 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="81081800001d000000010054409d0954", 0x10)

2018/04/06 22:52:38 executing program 7:
perf_event_open(&(0x7f0000757f88)={0x1, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f00008f7fe7)='#[vboxnet0vmnet1security\x00', 0x100000202)
pwritev(r0, &(0x7f00002cfff0)=[{&(0x7f0000878ff9)='$', 0x1}], 0x1, 0x0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x200000000000001, 0x8011, r0, 0x0)

2018/04/06 22:52:38 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/icmp\x00')
pread64(r0, &(0x7f0000000000)=""/85, 0x55, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl(r1, 0x800000000008983, &(0x7f0000000000))

2018/04/06 22:52:38 executing program 2:
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}, @udp={0x0, 0x0, 0x8}}}}}, &(0x7f00000000c0))

2018/04/06 22:52:38 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syz_tun\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=@ipv6_deladdr={0x2c, 0x15, 0x115, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback={0x0, 0x1}}]}, 0x2c}, 0x1}, 0x0)

2018/04/06 22:52:38 executing program 5:
mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
io_setup(0x0, &(0x7f0000000080))

2018/04/06 22:52:38 executing program 4:

2018/04/06 22:52:38 executing program 1:
perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
listen(0xffffffffffffffff, 0x0)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x100, 0x0)
preadv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/18, 0x12}], 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)

2018/04/06 22:52:38 executing program 5:
mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040))

2018/04/06 22:52:38 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='..', 0x0, 0x0)
syncfs(r1)

2018/04/06 22:52:38 executing program 2:
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}, @udp={0x0, 0x0, 0x8}}}}}, &(0x7f00000000c0))

2018/04/06 22:52:38 executing program 1:
r0 = socket(0x1000000000011, 0x800000003, 0x0)
ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000180)={'bridge0\x00', {0x2}})

2018/04/06 22:52:38 executing program 6:
perf_event_open(&(0x7f0000271000)={0x2, 0x78, 0x0, 0x80000002}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000)
shmdt(r0)

[   61.843148] ==================================================================
[   61.850583] BUG: KMSAN: uninit-value in vmac_setkey+0x337/0x940
[   61.856656] CPU: 0 PID: 5207 Comm: syz-executor3 Not tainted 4.16.0+ #81
[   61.863500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   61.872868] Call Trace:
[   61.875496]  dump_stack+0x185/0x1d0
[   61.879148]  ? vmac_setkey+0x337/0x940
[   61.883059]  kmsan_report+0x142/0x240
[   61.886875]  ? aes_set_key+0x260/0x260
2018/04/06 22:52:38 executing program 7:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
syncfs(r1)

[   61.890783]  __msan_warning_32+0x6c/0xb0
[   61.894861]  ? aes_set_key+0x260/0x260
[   61.898774]  vmac_setkey+0x337/0x940
[   61.902510]  ? vmac_final+0x3f80/0x3f80
[   61.906495]  shash_async_setkey+0x337/0x4c0
[   61.910822]  ? __msan_metadata_ptr_for_load_4+0x10/0x20
[   61.916190]  ? trace_kmalloc+0xb6/0x2b0
[   61.920170]  ? shash_async_digest+0x1b0/0x1b0
[   61.924678]  crypto_ahash_setkey+0x31a/0x470
[   61.929100]  hash_setkey+0x8b/0xa0
[   61.932654]  alg_setsockopt+0x6c5/0x740
[   61.936903]  ? hash_release+0x50/0x50
2018/04/06 22:52:38 executing program 2:
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000)

[   61.940717]  ? alg_accept+0xd0/0xd0
[   61.944355]  SYSC_setsockopt+0x4b8/0x570
[   61.948435]  SyS_setsockopt+0x76/0xa0
[   61.952270]  do_syscall_64+0x309/0x430
[   61.956173]  ? SYSC_recv+0xe0/0xe0
[   61.959733]  entry_SYSCALL_64_after_hwframe+0x3d/0xa2
[   61.964929] RIP: 0033:0x455259
[   61.968127] RSP: 002b:00007f8c75a01c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   61.975843] RAX: ffffffffffffffda RBX: 00007f8c75a026d4 RCX: 0000000000455259
[   61.983123] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000013
[   61.990400] RBP: 000000000072bea0 R08: 0000000000000010 R09: 0000000000000000
[   61.997682] R10: 00000000200000c0 R11: 0000000000000246 R12: 00000000ffffffff
[   62.004957] R13: 0000000000000510 R14: 00000000006faa20 R15: 0000000000000000
[   62.012237] 
[   62.013867] Local variable description: ----out.i@vmac_setkey
[   62.019744] Variable was created at:
[   62.023495]  vmac_setkey+0x93/0x940
[   62.027138]  shash_async_setkey+0x337/0x4c0
[   62.031462] ==================================================================
[   62.038822] Disabling lock debugging due to kernel taint
2018/04/06 22:52:39 executing program 7:
perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000540)=""/90)

[   62.044277] Kernel panic - not syncing: panic_on_warn set ...
[   62.044277] 
[   62.051662] CPU: 0 PID: 5207 Comm: syz-executor3 Tainted: G    B            4.16.0+ #81
[   62.059805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   62.069158] Call Trace:
[   62.071765]  dump_stack+0x185/0x1d0
[   62.075403]  panic+0x39d/0x940
[   62.078628]  ? vmac_setkey+0x337/0x940
[   62.082524]  kmsan_report+0x238/0x240
[   62.086336]  ? aes_set_key+0x260/0x260
[   62.090231]  __msan_warning_32+0x6c/0xb0
[   62.094295]  ? aes_set_key+0x260/0x260
[   62.098196]  vmac_setkey+0x337/0x940
[   62.101929]  ? vmac_final+0x3f80/0x3f80
[   62.105911]  shash_async_setkey+0x337/0x4c0
[   62.110242]  ? __msan_metadata_ptr_for_load_4+0x10/0x20
[   62.115612]  ? trace_kmalloc+0xb6/0x2b0
[   62.119599]  ? shash_async_digest+0x1b0/0x1b0
[   62.124108]  crypto_ahash_setkey+0x31a/0x470
[   62.128526]  hash_setkey+0x8b/0xa0
[   62.132080]  alg_setsockopt+0x6c5/0x740
[   62.136063]  ? hash_release+0x50/0x50
[   62.139871]  ? alg_accept+0xd0/0xd0
[   62.143513]  SYSC_setsockopt+0x4b8/0x570
[   62.147594]  SyS_setsockopt+0x76/0xa0
[   62.151399]  do_syscall_64+0x309/0x430
[   62.155300]  ? SYSC_recv+0xe0/0xe0
[   62.158854]  entry_SYSCALL_64_after_hwframe+0x3d/0xa2
[   62.164052] RIP: 0033:0x455259
[   62.167242] RSP: 002b:00007f8c75a01c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   62.174953] RAX: ffffffffffffffda RBX: 00007f8c75a026d4 RCX: 0000000000455259
[   62.182225] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000013
[   62.189498] RBP: 000000000072bea0 R08: 0000000000000010 R09: 0000000000000000
[   62.196774] R10: 00000000200000c0 R11: 0000000000000246 R12: 00000000ffffffff
[   62.204043] R13: 0000000000000510 R14: 00000000006faa20 R15: 0000000000000000
[   62.211873] Dumping ftrace buffer:
[   62.215403]    (ftrace buffer empty)
[   62.219096] Kernel Offset: disabled
[   62.222706] Rebooting in 86400 seconds..