INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.24' (ECDSA) to the list of known hosts. 2018/04/16 01:11:32 fuzzer started 2018/04/16 01:11:33 dialing manager at 10.128.0.26:36243 2018/04/16 01:11:39 kcov=true, comps=false 2018/04/16 01:11:42 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x7ff, 0x4) sendto$inet6(r0, &(0x7f0000f98000), 0xfffffffffffffff3, 0x2000000c, &(0x7f00004a5fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/16 01:11:42 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000340)) ioctl$TIOCSBRK(r0, 0x40044590) 2018/04/16 01:11:42 executing program 3: 2018/04/16 01:11:43 executing program 7: 2018/04/16 01:11:43 executing program 2: 2018/04/16 01:11:43 executing program 5: 2018/04/16 01:11:43 executing program 4: 2018/04/16 01:11:43 executing program 6: syzkaller login: [ 44.291389] ip (3754) used greatest stack depth: 54672 bytes left [ 44.644381] ip (3787) used greatest stack depth: 54312 bytes left [ 45.785263] ip (3896) used greatest stack depth: 54200 bytes left [ 46.095393] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.101907] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.134016] device bridge_slave_0 entered promiscuous mode [ 46.178416] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.184950] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.204752] device bridge_slave_0 entered promiscuous mode [ 46.218642] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.225145] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.246984] device bridge_slave_0 entered promiscuous mode [ 46.290930] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.297468] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.331960] device bridge_slave_0 entered promiscuous mode [ 46.351070] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.357550] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.389936] device bridge_slave_1 entered promiscuous mode [ 46.399474] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.405978] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.431756] device bridge_slave_0 entered promiscuous mode [ 46.439583] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.446112] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.457499] device bridge_slave_0 entered promiscuous mode [ 46.468315] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.474789] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.497926] device bridge_slave_0 entered promiscuous mode [ 46.516903] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.523389] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.530871] device bridge_slave_1 entered promiscuous mode [ 46.545442] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.551884] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.570557] device bridge_slave_1 entered promiscuous mode [ 46.578165] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.584629] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.605238] device bridge_slave_0 entered promiscuous mode [ 46.627242] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.633759] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.650915] device bridge_slave_1 entered promiscuous mode [ 46.658740] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.669642] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.679385] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.685845] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.716903] device bridge_slave_1 entered promiscuous mode [ 46.723672] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.730165] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.754275] device bridge_slave_1 entered promiscuous mode [ 46.763489] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.769961] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.800546] device bridge_slave_1 entered promiscuous mode [ 46.818606] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.830167] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.836665] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.857282] device bridge_slave_1 entered promiscuous mode [ 46.883950] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.893909] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.901499] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.911703] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.937730] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.967257] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.037437] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.051398] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.108415] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.150481] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.160556] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.185980] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.299778] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.890353] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.921069] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.035526] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.044980] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.098139] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.106366] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.155643] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.166746] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.183745] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.256785] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.269168] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.280168] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.317258] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.346564] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.372785] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.546886] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.073960] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.194676] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.210851] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.262550] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.285614] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.311787] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.363889] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.386677] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.419610] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.433631] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.480488] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.489447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.502814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.533482] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.540929] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.551216] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.574708] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.620283] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.647521] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.654679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.670437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.705080] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.712249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.725167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.756323] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.763551] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.774998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.806612] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.814370] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.821563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.855211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.878789] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.889574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.902405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.926289] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.933976] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.942280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.974959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.996747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.012731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.026347] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.033793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.051604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.064684] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.077268] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.085536] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.095952] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.115803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.140563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.158843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.176443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.191803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.210382] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.217889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.234144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.256353] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.274539] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.286710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.326227] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.334644] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.342220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.355781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.397868] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.425848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.127545] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.134107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.140943] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.147413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.199137] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.207160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.381253] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.387753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.394651] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.401155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.438343] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.455087] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.461576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.468457] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.474924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.516747] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.528337] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.534810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.541681] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.548145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.601755] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.616963] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.623476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.630447] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.636895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.656473] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.672292] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.678768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.685640] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.692125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.743177] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.753227] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.759709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.766548] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.773076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.840924] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.855455] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.861918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.868782] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.875244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.889862] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.216200] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.231876] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.272666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.282931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.292942] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.301119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.309850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.655913] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.768395] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.873171] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.008693] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.065812] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.211362] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.276829] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.288936] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.475511] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.482149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.494442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.536008] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.542365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.560165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.711969] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.718304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.728788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.788918] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.795194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.803152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.998368] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.004879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.018716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.051620] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.058469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.088152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.116909] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.126662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.157646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.199232] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.206859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.234814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/16 01:12:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0xa, 0x6, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10d, 0x11, &(0x7f0000000000), 0x4) 2018/04/16 01:12:09 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00004ca000)={&(0x7f0000000080)={0x14, 0x4, 0x100000000040006, 0x1}, 0x14}, 0x1}, 0x0) 2018/04/16 01:12:09 executing program 2: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000), 0x0) 2018/04/16 01:12:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000029000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001800190000000000000008000a000000000000070000000008041500040000000800160004000000"], 0x1}, 0x1}, 0x0) 2018/04/16 01:12:09 executing program 5: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x82800) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000d97000)={0x0, 0x1000000200007d}) 2018/04/16 01:12:09 executing program 7: kexec_load(0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000080), 0x0, 0x0, 0x3e0000}], 0x0) 2018/04/16 01:12:09 executing program 4: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x80e85411, &(0x7f0000d97000)) 2018/04/16 01:12:09 executing program 6: kexec_load(0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000080), 0x0, 0x0, 0x3e0000}], 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) 2018/04/16 01:12:09 executing program 3: openat$sequencer(0xffffffffffffff9c, &(0x7f00007a8000)='/dev/sequencer\x00', 0x0, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000d97000)={0xffffffffffffffff, 0x1000000200007d}) readv(r0, &(0x7f0000d48fc0)=[{&(0x7f00003effa9)=""/87, 0x57}], 0x1) 2018/04/16 01:12:09 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000100)='/dev/vga_arbiter\x00', 0x3) write$binfmt_misc(r0, &(0x7f0000000040)={'syz0'}, 0x4) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000000240), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000007060804002000fffc0c6565643b799365195f1b76"], 0x1000) 2018/04/16 01:12:09 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="d179f2508fb13583605d0008a230e7a657f9cc6e", 0x14) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000036c0)=[{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000640)="3e59fe04bae75cfd14f526e0acc3c48c", 0x10}], 0x1}], 0x1, 0x0) recvmsg(r1, &(0x7f00000001c0)={&(0x7f0000000140)=@nfc_llcp, 0x80, &(0x7f0000000200)=[{&(0x7f0000000300)=""/88, 0x1e}], 0x1, &(0x7f00009f2000)=""/190, 0xbe}, 0x0) 2018/04/16 01:12:10 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000516ff0)={0x2, 0x4e21, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='yeah\x00', 0x5) sendto$inet(r0, &(0x7f0000588fff), 0xfffffffffffffe98, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x1) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_xfrm(r1, &(0x7f00009d3000)={&(0x7f0000c15000)={0x10}, 0xc, &(0x7f00001e5ff0)={&(0x7f0000abdefc)=@delsa={0x4c, 0x12, 0x515485708c54ddb, 0x0, 0x0, {@in=@rand_addr}, [@sec_ctx={0x24, 0x8, {0x1d, 0x8, 0x0, 0x0, 0x15, "69cc8910cf7a5164ef891111a0edabf37c1fd93a0d"}}]}, 0x4c}, 0x1}, 0x0) 2018/04/16 01:12:10 executing program 6: socket(0xa, 0x80a0d, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0xbe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798007439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a36dca30d55e4fda59435fe1fd4262d165a6ccb3f75372e1842ce015e10aad2f3479389f8ec7abe08a38776073709fb20b39b17e9fec21147cdd6390442436826385cb97f04dadc3393024b97b203b3e121d3c67c593ee9f0787a405a1d3ec1935bee8a24cb2123e4a0b98b88796b1311ea4c0dc94e61fcf4a1090f4c360818abd0dd134ae391fe99cf200991798d0cc90367c4ee08ae49075dd74dad19937e51e0812cefa80333d3ad38d5cf07a63513") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32], 0x1) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x2ef6, 0x401, 0x8001, 0x3}) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000003c0)={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, 0x0, 0x40d, [], 0x294, &(0x7f0000000500)=[{}], &(0x7f0000000180)=""/207}, &(0x7f0000000280)=0xd4) getresgid(&(0x7f00000004c0), &(0x7f0000000540), &(0x7f0000000480)=0x0) setfsgid(r1) socket$inet_udp(0x2, 0x2, 0x0) 2018/04/16 01:12:10 executing program 7: r0 = socket(0x40000000015, 0x5, 0x0) keyctl$session_to_parent(0x12) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000000000000000000f2612cccba854eef8948a700"]}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000080)={r1, r2/1000+10000}, 0xffffffffffffff3f) [ 69.312707] ================================================================== [ 69.320121] BUG: KMSAN: uninit-value in gcmaes_decrypt+0x2ec/0xea0 [ 69.326448] CPU: 0 PID: 5787 Comm: syz-executor1 Not tainted 4.16.0+ #83 [ 69.333291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.342643] Call Trace: [ 69.345240] dump_stack+0x185/0x1d0 [ 69.348867] ? gcmaes_decrypt+0x2ec/0xea0 [ 69.353007] kmsan_report+0x142/0x240 [ 69.356802] __msan_warning_32+0x6c/0xb0 [ 69.360855] gcmaes_decrypt+0x2ec/0xea0 [ 69.364836] generic_gcmaes_decrypt+0x181/0x1e0 [ 69.369498] ? generic_gcmaes_encrypt+0x1e0/0x1e0 [ 69.374323] gcmaes_wrapper_decrypt+0x2f5/0x340 [ 69.378975] ? gcmaes_wrapper_encrypt+0x2d0/0x2d0 [ 69.383808] crypto_rfc4543_crypt+0xaec/0xb40 [ 69.388295] ? crypto_has_alg+0x280/0x280 [ 69.392430] crypto_rfc4543_decrypt+0x47/0x50 [ 69.396906] ? crypto_rfc4543_encrypt+0x60/0x60 [ 69.401560] aead_recvmsg+0x25b5/0x2960 [ 69.405552] sock_recvmsg+0x1d0/0x230 [ 69.409354] ? aead_sendmsg+0x1b0/0x1b0 [ 69.413317] ___sys_recvmsg+0x3fb/0x810 [ 69.417281] ? __fget_light+0x56/0x710 [ 69.421148] ? __fdget+0x4e/0x60 [ 69.424507] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 69.429852] ? __fget_light+0x6b9/0x710 [ 69.433831] SYSC_recvmsg+0x298/0x3c0 [ 69.437629] SyS_recvmsg+0x54/0x80 [ 69.441149] do_syscall_64+0x309/0x430 [ 69.445035] ? ___sys_recvmsg+0x810/0x810 [ 69.449176] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 69.454359] RIP: 0033:0x455319 [ 69.457536] RSP: 002b:00007f513832bc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 69.465223] RAX: ffffffffffffffda RBX: 00007f513832c6d4 RCX: 0000000000455319 [ 69.472483] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000014 [ 69.479737] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 69.486987] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 69.494246] R13: 0000000000000496 R14: 00000000006f9eb0 R15: 0000000000000000 [ 69.501521] [ 69.503140] Uninit was created at: [ 69.506669] kmsan_internal_poison_shadow+0xb8/0x1b0 [ 69.511763] kmsan_kmalloc+0x94/0x100 [ 69.515552] __kmalloc+0x23c/0x350 [ 69.519075] sock_kmalloc+0x14e/0x270 [ 69.522862] af_alg_alloc_areq+0x85/0x320 [ 69.526996] aead_recvmsg+0x65a/0x2960 [ 69.530885] sock_recvmsg+0x1d0/0x230 [ 69.534683] ___sys_recvmsg+0x3fb/0x810 [ 69.538650] SYSC_recvmsg+0x298/0x3c0 [ 69.542439] SyS_recvmsg+0x54/0x80 [ 69.545968] do_syscall_64+0x309/0x430 [ 69.549837] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 69.555001] ================================================================== [ 69.562351] Disabling lock debugging due to kernel taint [ 69.567786] Kernel panic - not syncing: panic_on_warn set ... [ 69.567786] [ 69.575133] CPU: 0 PID: 5787 Comm: syz-executor1 Tainted: G B 4.16.0+ #83 [ 69.583250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.592590] Call Trace: [ 69.595176] dump_stack+0x185/0x1d0 [ 69.598798] panic+0x39d/0x940 [ 69.601999] ? gcmaes_decrypt+0x2ec/0xea0 [ 69.606144] kmsan_report+0x238/0x240 [ 69.609950] __msan_warning_32+0x6c/0xb0 [ 69.614000] gcmaes_decrypt+0x2ec/0xea0 [ 69.617970] generic_gcmaes_decrypt+0x181/0x1e0 [ 69.622623] ? generic_gcmaes_encrypt+0x1e0/0x1e0 [ 69.627450] gcmaes_wrapper_decrypt+0x2f5/0x340 [ 69.632118] ? gcmaes_wrapper_encrypt+0x2d0/0x2d0 [ 69.636946] crypto_rfc4543_crypt+0xaec/0xb40 [ 69.641423] ? crypto_has_alg+0x280/0x280 [ 69.645568] crypto_rfc4543_decrypt+0x47/0x50 [ 69.650064] ? crypto_rfc4543_encrypt+0x60/0x60 [ 69.654739] aead_recvmsg+0x25b5/0x2960 [ 69.658714] sock_recvmsg+0x1d0/0x230 [ 69.662498] ? aead_sendmsg+0x1b0/0x1b0 [ 69.666457] ___sys_recvmsg+0x3fb/0x810 [ 69.670418] ? __fget_light+0x56/0x710 [ 69.674288] ? __fdget+0x4e/0x60 [ 69.677649] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 69.683009] ? __fget_light+0x6b9/0x710 [ 69.686996] SYSC_recvmsg+0x298/0x3c0 [ 69.690805] SyS_recvmsg+0x54/0x80 [ 69.694344] do_syscall_64+0x309/0x430 [ 69.698238] ? ___sys_recvmsg+0x810/0x810 [ 69.702393] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 69.707574] RIP: 0033:0x455319 [ 69.710762] RSP: 002b:00007f513832bc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 69.718476] RAX: ffffffffffffffda RBX: 00007f513832c6d4 RCX: 0000000000455319 [ 69.725748] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000014 [ 69.733018] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 69.740299] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 69.747566] R13: 0000000000000496 R14: 00000000006f9eb0 R15: 0000000000000000 [ 69.755290] Dumping ftrace buffer: [ 69.758812] (ftrace buffer empty) [ 69.762497] Kernel Offset: disabled [ 69.766099] Rebooting in 86400 seconds..