INIT: Entering runlevel: 2

[info] Using makefile-style concurrent boot in runlevel 2.
[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.0.59' (ECDSA) to the list of known hosts.
2018/04/10 20:56:01 fuzzer started
2018/04/10 20:56:02 dialing manager at 10.128.0.26:40599
2018/04/10 20:56:08 kcov=true, comps=false
2018/04/10 20:56:11 executing program 0:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x3, &(0x7f0000000500)=ANY=[])

2018/04/10 20:56:11 executing program 2:
perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0)
keyctl$revoke(0x3, r1)

2018/04/10 20:56:11 executing program 7:
r0 = socket$inet(0x2, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000a2ffc), 0x4)

2018/04/10 20:56:11 executing program 1:
r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$read(0xb, r0, &(0x7f0000000080)=""/4, 0x4)

2018/04/10 20:56:11 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r0, &(0x7f000043cf32), 0x0, 0x600007ff, &(0x7f0000000000)={0x2}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000080)=0x9, 0x4)
setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000040), 0x4)

2018/04/10 20:56:11 executing program 4:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x153f30ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$setname(0xf, &(0x7f0000000080)='selfem0+mime_type\x00')

2018/04/10 20:56:11 executing program 6:

2018/04/10 20:56:11 executing program 5:

syzkaller login: [   43.362243] ip (3763) used greatest stack depth: 54688 bytes left
[   43.479414] ip (3777) used greatest stack depth: 54672 bytes left
[   44.036082] ip (3827) used greatest stack depth: 54408 bytes left
[   45.060917] ip (3925) used greatest stack depth: 53960 bytes left
[   46.940161] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   47.119155] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   47.139878] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   47.269617] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   47.312517] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   47.373016] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   47.381738] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   47.440685] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   55.952958] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   56.292100] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   56.344340] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   56.351582] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   56.409286] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   56.559294] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   56.587318] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   56.711580] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   56.717876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   56.729626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   56.760553] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   57.045401] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   57.051635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   57.064007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   57.122889] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   57.129147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   57.137598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   57.168244] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   57.185201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   57.192728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   57.225136] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   57.233208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   57.273795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   57.353000] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   57.359304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   57.371621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   57.404591] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   57.413971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   57.444975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   57.624108] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   57.630400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   57.639959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
2018/04/10 20:56:28 executing program 0:

2018/04/10 20:56:28 executing program 2:
perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0)
keyctl$revoke(0x3, r1)

2018/04/10 20:56:28 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r0, &(0x7f000043cf32), 0x0, 0x600007ff, &(0x7f0000000000)={0x2}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000080)=0x9, 0x4)
setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000040), 0x4)

2018/04/10 20:56:28 executing program 1:

2018/04/10 20:56:28 executing program 6:

2018/04/10 20:56:28 executing program 5:

2018/04/10 20:56:28 executing program 4:

2018/04/10 20:56:28 executing program 7:

2018/04/10 20:56:28 executing program 0:

2018/04/10 20:56:28 executing program 4:

2018/04/10 20:56:28 executing program 1:

2018/04/10 20:56:28 executing program 6:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3)
sendto$inet(r0, &(0x7f0000f53fff), 0xfffffffffffffcf1, 0x20000000, &(0x7f000006d000)={0x2}, 0x10)
shutdown(r0, 0x0)

2018/04/10 20:56:28 executing program 7:
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000015e15)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x14], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3], 0x1}, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0)
openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.cpus\x00', 0x2, 0x0)

2018/04/10 20:56:29 executing program 5:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
sched_getparam(0x0, &(0x7f0000000080))
perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000000)="1f0000000104fffffd3b000007110000f30501000b000100020423ca0000cf", 0x1f)

2018/04/10 20:56:29 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000001000), 0x4)
bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, &(0x7f0000b31000)="f9", 0x1, 0x0, &(0x7f00009e1000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
listen(r0, 0x87)
r1 = accept4(r0, &(0x7f0000000000)=@can, &(0x7f0000000040)=0x10, 0x0)
dup3(r0, r1, 0x0)

2018/04/10 20:56:29 executing program 2:
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000940)='./file0\x00', 0x0)
mount(&(0x7f0000000480)=':/file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f00000003c0))

2018/04/10 20:56:29 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(authenc(rmd160-generic,ctr-aes-aesni))\x00'}, 0x58)
dup2(r1, r0)

[   59.139927] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'.
[   59.281925] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'.
2018/04/10 20:56:29 executing program 0:

2018/04/10 20:56:29 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000deb000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fcntl$lock(r0, 0x8000000000000007, &(0x7f0000002000))

2018/04/10 20:56:29 executing program 7:
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000015e15)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x14], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3], 0x1}, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0)
openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.cpus\x00', 0x2, 0x0)

2018/04/10 20:56:29 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000001000), 0x4)
bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, &(0x7f0000b31000)="f9", 0x1, 0x0, &(0x7f00009e1000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
listen(r0, 0x87)
r1 = accept4(r0, &(0x7f0000000000)=@can, &(0x7f0000000040)=0x10, 0x0)
dup3(r0, r1, 0x0)

2018/04/10 20:56:29 executing program 5:

2018/04/10 20:56:29 executing program 2:

2018/04/10 20:56:29 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(authenc(rmd160-generic,ctr-aes-aesni))\x00'}, 0x58)
dup2(r1, r0)

2018/04/10 20:56:29 executing program 6:

2018/04/10 20:56:30 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000001000), 0x4)
bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, &(0x7f0000b31000)="f9", 0x1, 0x0, &(0x7f00009e1000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
listen(r0, 0x87)
r1 = accept4(r0, &(0x7f0000000000)=@can, &(0x7f0000000040)=0x10, 0x0)
dup3(r0, r1, 0x0)

2018/04/10 20:56:30 executing program 5:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000001000), 0x4)
bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, &(0x7f0000b31000)="f9", 0x1, 0x0, &(0x7f00009e1000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
listen(r0, 0x87)
r1 = accept4(r0, &(0x7f0000000000)=@can, &(0x7f0000000040)=0x10, 0x0)
dup3(r0, r1, 0x0)

2018/04/10 20:56:30 executing program 6:

2018/04/10 20:56:30 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f000009ff70)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1)

2018/04/10 20:56:30 executing program 7:
r0 = socket$inet_sctp(0x2, 0x40000000000001, 0x84)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_ts_info={0x41}})

2018/04/10 20:56:30 executing program 1:
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.cpus\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="382f92426f25465d815cf8b31bc227bb42373c7b4224f6b3da3547b42ccfaafb0135d41e56a74ed1593d8ebae45f3d45bee84f"], 0x33)

2018/04/10 20:56:31 executing program 4:

2018/04/10 20:56:31 executing program 6:
r0 = socket(0x11, 0x100000802, 0x0)
r1 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x2)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000003c0)={"6966623000faffffffffffffff00", 0x2691d0877f1cca97})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201})
write$tun(r1, &(0x7f0000000400)={@void, @hdr, @eth={@random="36a01c10b197", @link_local={0x1, 0x80, 0xc2}}}, 0x18)

2018/04/10 20:56:31 executing program 7:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, &(0x7f0000000280), 0xfd11, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10)
clock_gettime(0x0, &(0x7f0000004d00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000001b00)=""/11, 0xb}, {&(0x7f0000001b40)=""/15, 0xf}, {&(0x7f0000001bc0)=""/140, 0x8c}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4}, 0x8001}, {{&(0x7f0000001d00)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000002080)=[{&(0x7f0000001e40)=""/16, 0x10}, {&(0x7f0000001e80)=""/120, 0x78}], 0x2, &(0x7f0000002100)=""/126, 0x7e}}], 0x2, 0x0, &(0x7f0000000140)={0x0, r1+30000000})

2018/04/10 20:56:31 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000ff1000)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c)

2018/04/10 20:56:31 executing program 2:

2018/04/10 20:56:31 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000001000), 0x4)
bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, &(0x7f0000b31000)="f9", 0x1, 0x0, &(0x7f00009e1000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
listen(r0, 0x87)
r1 = accept4(r0, &(0x7f0000000000)=@can, &(0x7f0000000040)=0x10, 0x0)
dup3(r0, r1, 0x0)

2018/04/10 20:56:31 executing program 5:

2018/04/10 20:56:31 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000001000), 0x4)
bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, &(0x7f0000b31000)="f9", 0x1, 0x0, &(0x7f00009e1000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
listen(r0, 0x87)
r1 = accept4(r0, &(0x7f0000000000)=@can, &(0x7f0000000040)=0x10, 0x0)
dup3(r0, r1, 0x0)

2018/04/10 20:56:31 executing program 5:

2018/04/10 20:56:31 executing program 1:

2018/04/10 20:56:31 executing program 2:

2018/04/10 20:56:31 executing program 4:

2018/04/10 20:56:31 executing program 5:

2018/04/10 20:56:31 executing program 6:

2018/04/10 20:56:31 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x2, &(0x7f0000000440)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xffffff80}], &(0x7f00000002c0)="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", 0x1, 0xaf, &(0x7f0000000200)=""/175}, 0x48)

2018/04/10 20:56:31 executing program 2:

2018/04/10 20:56:31 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x200101002)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="d3fa9697bb210000009349", 0xb}], 0x1)

2018/04/10 20:56:31 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x2ad)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10)

2018/04/10 20:56:31 executing program 7:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r0, &(0x7f0000000b40), 0x0, 0x20020003, &(0x7f0000000b00)={0x2, 0x0, @loopback=0x7f000001}, 0x10)

2018/04/10 20:56:31 executing program 6:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10)
sendto$inet(r0, &(0x7f0000000280), 0xfd11, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10)
getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f00000002c0), &(0x7f0000000340)=0x4)
clock_gettime(0x0, &(0x7f0000004d00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000002500)=@sco, 0x80, &(0x7f0000004340)=[{&(0x7f00000041c0)=""/215, 0xd7}], 0x1, &(0x7f0000000180)=""/186, 0xba}}, {{&(0x7f0000004600)=@nfc_llcp, 0x80, &(0x7f0000004a40), 0xcb, &(0x7f0000004ac0)}}], 0x2, 0x0, &(0x7f0000000140)={0x0, r1+30000000})

2018/04/10 20:56:31 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000001000), 0x4)
bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, &(0x7f0000b31000)="f9", 0x1, 0x0, &(0x7f00009e1000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
listen(r0, 0x87)
r1 = accept4(r0, &(0x7f0000000000)=@can, &(0x7f0000000040)=0x10, 0x0)
dup3(r0, r1, 0x0)

2018/04/10 20:56:31 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000001000), 0x4)
bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, &(0x7f0000b31000)="f9", 0x1, 0x0, &(0x7f00009e1000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
listen(r0, 0x87)
r1 = accept4(r0, &(0x7f0000000000)=@can, &(0x7f0000000040)=0x10, 0x0)
dup3(r0, r1, 0x0)

2018/04/10 20:56:32 executing program 2:
r0 = socket(0x11, 0x4000000000080003, 0x0)
setsockopt(r0, 0x107, 0xa, &(0x7f0000000000), 0x0)

2018/04/10 20:56:32 executing program 7:
r0 = socket$kcm(0x2, 0x4000000005, 0x0)
sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@in={0x2, 0x0, @loopback=0x7f000001}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000080)='A', 0x1}], 0x1, &(0x7f0000000400)=[{0x18, 0x84, 0x7, "b5"}, {0x10}], 0x28}, 0x0)

2018/04/10 20:56:32 executing program 4:
r0 = socket(0x10, 0x1000000000803, 0x0)
getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f0000002ffc)=""/4, &(0x7f0000000000)=0x144)

2018/04/10 20:56:32 executing program 6:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10)
sendto$inet(r0, &(0x7f0000000280), 0xfd11, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10)
getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f00000002c0), &(0x7f0000000340)=0x4)
clock_gettime(0x0, &(0x7f0000004d00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000002500)=@sco, 0x80, &(0x7f0000004340)=[{&(0x7f00000041c0)=""/215, 0xd7}], 0x1, &(0x7f0000000180)=""/186, 0xba}}, {{&(0x7f0000004600)=@nfc_llcp, 0x80, &(0x7f0000004a40), 0xcb, &(0x7f0000004ac0)}}], 0x2, 0x0, &(0x7f0000000140)={0x0, r1+30000000})

2018/04/10 20:56:32 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10)
sendto$inet(r0, &(0x7f0000000280), 0xfd11, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10)
getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f00000002c0), &(0x7f0000000340)=0x4)
clock_gettime(0x0, &(0x7f0000004d00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000002500)=@sco, 0x80, &(0x7f0000004340)=[{&(0x7f00000041c0)=""/215, 0xd7}], 0x1, &(0x7f0000000180)=""/186, 0xba}}, {{&(0x7f0000004600)=@nfc_llcp, 0x80, &(0x7f0000004a40), 0xcb, &(0x7f0000004ac0)}}], 0x2, 0x0, &(0x7f0000000140)={0x0, r1+30000000})

2018/04/10 20:56:32 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0)

2018/04/10 20:56:32 executing program 7:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000ceaff6)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x200000005406, &(0x7f00009fbff8))

2018/04/10 20:56:32 executing program 4:

2018/04/10 20:56:32 executing program 2:

2018/04/10 20:56:32 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000001000), 0x4)
bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, &(0x7f0000b31000)="f9", 0x1, 0x0, &(0x7f00009e1000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
listen(r0, 0x87)
accept4(r0, &(0x7f0000000000)=@can, &(0x7f0000000040)=0x10, 0x0)

2018/04/10 20:56:32 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000276000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0)
fallocate(r2, 0x0, 0x0, 0x73e0)
sendfile(r1, r2, &(0x7f0000e64ff8), 0x8e18)

2018/04/10 20:56:32 executing program 7:
r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
ioctl(r0, 0x4400000000001274, &(0x7f0000000080))

2018/04/10 20:56:32 executing program 2:
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)

2018/04/10 20:56:32 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000001000), 0x4)
bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, &(0x7f0000b31000)="f9", 0x1, 0x0, &(0x7f00009e1000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
listen(r0, 0x87)
dup3(r0, 0xffffffffffffffff, 0x0)

2018/04/10 20:56:32 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setregid(0x0, r1)

2018/04/10 20:56:32 executing program 6:
r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6df1733d7a8a242fd899e0633f5fcea8fb5a550ed80ebba4d909c7a124d8ac39add13dc93a80f22ff9fd35a844f3e8b5ade4e5935137af6fe251190634435dca", "6aaba7a936009867bd21673a08478220febadc5ca0c0caf1f4833b9ff18a89a285f049691fdaee090426b5018b54096bdaacf1e7a2fb27febc2e8d7b46599493", "ecd2881042e088581e6e599a5591e6c882e32e7ea6697b93d32112b2bc83d72a"})
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000000))

2018/04/10 20:56:32 executing program 5:
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000461000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f00009ecff8), 0x2, 0x3)

[   62.857847] mmap: syz-executor5 (5295) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt.
[   62.918686] ==================================================================
[   62.926108] BUG: KMSAN: uninit-value in sha_transform+0x58ec/0x6320
[   62.932527] CPU: 1 PID: 5296 Comm: syz-executor1 Not tainted 4.16.0+ #83
[   62.939367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   62.948718] Call Trace:
[   62.951313]  dump_stack+0x185/0x1d0
[   62.954949]  ? sha_transform+0x58ec/0x6320
[   62.959184]  kmsan_report+0x142/0x240
[   62.962991]  __msan_warning_32+0x6c/0xb0
[   62.967059]  sha_transform+0x58ec/0x6320
[   62.971128]  ? kmsan_set_origin_inline+0x6b/0x120
[   62.975982]  ? __msan_metadata_ptr_for_store_1+0x13/0x20
[   62.981443]  ? __msan_poison_alloca+0x15c/0x1d0
[   62.986114]  ? shash_async_update+0x290/0x360
[   62.990618]  crypto_sha1_update+0x4cb/0x5b0
[   62.994961]  ? crypto_hash_walk_first+0x210/0x380
[   62.999814]  ? shash_async_update+0x225/0x360
[   63.004322]  ? rmd320_transform+0x7f10/0x7f10
[   63.008825]  shash_async_update+0x290/0x360
[   63.013150]  ? shash_async_init+0x270/0x270
[   63.017471]  hash_sendpage+0x904/0xe10
[   63.021366]  ? hash_recvmsg+0xd50/0xd50
[   63.025349]  sock_sendpage+0x1de/0x2c0
[   63.029247]  pipe_to_sendpage+0x31b/0x430
[   63.033409]  ? sock_fasync+0x2b0/0x2b0
[   63.037311]  ? propagate_umount+0x3a30/0x3a30
[   63.041817]  __splice_from_pipe+0x49a/0xf30
[   63.046151]  ? generic_splice_sendpage+0x2a0/0x2a0
[   63.051091]  ? __msan_metadata_ptr_for_load_4+0x10/0x20
[   63.056468]  generic_splice_sendpage+0x1c6/0x2a0
[   63.061239]  ? iter_file_splice_write+0x1710/0x1710
[   63.066262]  ? iter_file_splice_write+0x1710/0x1710
[   63.071297]  direct_splice_actor+0x19b/0x200
[   63.075723]  splice_direct_to_actor+0x764/0x1040
[   63.080490]  ? do_splice_direct+0x540/0x540
[   63.084825]  ? security_file_permission+0x28f/0x4b0
[   63.089854]  ? rw_verify_area+0x35e/0x580
[   63.094022]  do_splice_direct+0x335/0x540
[   63.098185]  do_sendfile+0x1067/0x1e40
[   63.102094]  SYSC_sendfile64+0x1b3/0x300
[   63.106172]  SyS_sendfile64+0x64/0x90
[   63.109982]  do_syscall_64+0x309/0x430
[   63.113890]  ? SYSC_sendfile+0x320/0x320
[   63.117960]  entry_SYSCALL_64_after_hwframe+0x3d/0xa2
[   63.123143] RIP: 0033:0x455259
[   63.126328] RSP: 002b:00007f04c0b02c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[   63.134040] RAX: ffffffffffffffda RBX: 00007f04c0b036d4 RCX: 0000000000455259
[   63.141303] RDX: 0000000020e64ff8 RSI: 0000000000000015 RDI: 0000000000000014
[   63.148574] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[   63.155853] R10: 0000000000008e18 R11: 0000000000000246 R12: 00000000ffffffff
[   63.163132] R13: 00000000000004c6 R14: 00000000006fa330 R15: 0000000000000000
[   63.170410] 
[   63.172030] Uninit was created at:
[   63.175584]  kmsan_alloc_meta_for_pages+0x161/0x3a0
[   63.180612]  kmsan_alloc_page+0x82/0xe0
[   63.184599]  __alloc_pages_nodemask+0xf5b/0x5dc0
[   63.189369]  alloc_pages_vma+0xcc8/0x1800
[   63.193531]  shmem_alloc_and_acct_page+0x6d5/0x1000
[   63.198551]  shmem_getpage_gfp+0x35db/0x5770
[   63.202969]  shmem_fallocate+0xde2/0x1610
[   63.207122]  vfs_fallocate+0x9dc/0xde0
[   63.211012]  SYSC_fallocate+0x119/0x1d0
[   63.214985]  SyS_fallocate+0x64/0x90
[   63.218694]  do_syscall_64+0x309/0x430
[   63.222581]  entry_SYSCALL_64_after_hwframe+0x3d/0xa2
[   63.227754] ==================================================================
[   63.235107] Disabling lock debugging due to kernel taint
[   63.240548] Kernel panic - not syncing: panic_on_warn set ...
[   63.240548] 
[   63.247916] CPU: 1 PID: 5296 Comm: syz-executor1 Tainted: G    B            4.16.0+ #83
[   63.256050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   63.265398] Call Trace:
[   63.268001]  dump_stack+0x185/0x1d0
[   63.271627]  panic+0x39d/0x940
[   63.274823]  ? sha_transform+0x58ec/0x6320
[   63.279045]  kmsan_report+0x238/0x240
[   63.282849]  __msan_warning_32+0x6c/0xb0
[   63.286899]  sha_transform+0x58ec/0x6320
[   63.290955]  ? kmsan_set_origin_inline+0x6b/0x120
[   63.295806]  ? __msan_metadata_ptr_for_store_1+0x13/0x20
[   63.301259]  ? __msan_poison_alloca+0x15c/0x1d0
[   63.305923]  ? shash_async_update+0x290/0x360
[   63.310427]  crypto_sha1_update+0x4cb/0x5b0
[   63.314744]  ? crypto_hash_walk_first+0x210/0x380
[   63.319574]  ? shash_async_update+0x225/0x360
[   63.324072]  ? rmd320_transform+0x7f10/0x7f10
[   63.328569]  shash_async_update+0x290/0x360
[   63.332890]  ? shash_async_init+0x270/0x270
[   63.337205]  hash_sendpage+0x904/0xe10
[   63.341091]  ? hash_recvmsg+0xd50/0xd50
[   63.345064]  sock_sendpage+0x1de/0x2c0
[   63.348954]  pipe_to_sendpage+0x31b/0x430
[   63.353105]  ? sock_fasync+0x2b0/0x2b0
[   63.356984]  ? propagate_umount+0x3a30/0x3a30
[   63.361475]  __splice_from_pipe+0x49a/0xf30
[   63.365796]  ? generic_splice_sendpage+0x2a0/0x2a0
[   63.370715]  ? __msan_metadata_ptr_for_load_4+0x10/0x20
[   63.376077]  generic_splice_sendpage+0x1c6/0x2a0
[   63.380831]  ? iter_file_splice_write+0x1710/0x1710
[   63.385839]  ? iter_file_splice_write+0x1710/0x1710
[   63.390856]  direct_splice_actor+0x19b/0x200
[   63.395270]  splice_direct_to_actor+0x764/0x1040
[   63.400026]  ? do_splice_direct+0x540/0x540
[   63.404344]  ? security_file_permission+0x28f/0x4b0
[   63.409365]  ? rw_verify_area+0x35e/0x580
[   63.413519]  do_splice_direct+0x335/0x540
[   63.417665]  do_sendfile+0x1067/0x1e40
[   63.421560]  SYSC_sendfile64+0x1b3/0x300
[   63.425625]  SyS_sendfile64+0x64/0x90
[   63.429420]  do_syscall_64+0x309/0x430
[   63.433309]  ? SYSC_sendfile+0x320/0x320
[   63.437374]  entry_SYSCALL_64_after_hwframe+0x3d/0xa2
[   63.442549] RIP: 0033:0x455259
[   63.445722] RSP: 002b:00007f04c0b02c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[   63.453430] RAX: ffffffffffffffda RBX: 00007f04c0b036d4 RCX: 0000000000455259
[   63.460688] RDX: 0000000020e64ff8 RSI: 0000000000000015 RDI: 0000000000000014
[   63.467952] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[   63.475215] R10: 0000000000008e18 R11: 0000000000000246 R12: 00000000ffffffff
[   63.482478] R13: 00000000000004c6 R14: 00000000006fa330 R15: 0000000000000000
[   63.490221] Dumping ftrace buffer:
[   63.493748]    (ftrace buffer empty)
[   63.497429] Kernel Offset: disabled
[   63.501027] Rebooting in 86400 seconds..