INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.32' (ECDSA) to the list of known hosts. 2018/04/17 00:47:44 fuzzer started 2018/04/17 00:47:45 dialing manager at 10.128.0.26:43021 2018/04/17 00:47:51 kcov=true, comps=false 2018/04/17 00:47:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x800000003, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x6}, 0x4) dup2(r0, r1) 2018/04/17 00:47:55 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fe4)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f000000a000)=@ipv6_newroute={0xa4, 0x18, 0x781a241f, 0x0, 0x0, {0xa}, [@RTA_METRICS={0x88, 0x9, "8200106b2fbf63a425238e5946b775175da4c25257282298148ceef06464926e00fa5f73693d3fda29aa099a7437572c83e9e992bd8dc8f59e919303b40339b561b0f7ba05481f6c9f4fd2991c52b42266034e386d66dc781e5547908553a77e0b6fa2edeedd6e19622fb8e4005677b3aca379c80fc11735039f2aa6fb565277ad"}]}, 0xa4}, 0x1}, 0x0) 2018/04/17 00:47:55 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/79, 0x4f}], 0x1) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}, {{0x2}}], 0x30) 2018/04/17 00:47:55 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x4000000000001) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xdcd, @remote={0xfe, 0x80, [], 0xbb}, 0x200000007}, 0x1c) 2018/04/17 00:47:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x800000003, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000005ff0)={0x1, &(0x7f0000964ff8)=[{0x6}]}, 0x10) dup2(r0, r1) getegid() 2018/04/17 00:47:55 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x440000000000005) ioctl$sock_proto_private(r0, 0x89e1, &(0x7f0000000180)) 2018/04/17 00:47:55 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)="2e2f6367726f75702e6e6574007323079564651731fe86880c15c7fce2f61bee0c8a0aff537795604b13a0d25acd5b12dbedbce768f1051adb5ce31eb1b81362e01a769e2ce73dee29c5942012ae56c61810ba1e39c2f5186060c54c46697af352b48abde95a406db665c07dd58804df352b37907eb1d0b2a87f2b5ae6f6c22b1f4362a19beb16ddfe6c2e74449bf4744ca00a92e394d4e95b86ba03e23a28dcb2231788828d4a6ac3c922d995e590ed0fca2d457d2656a82597bf757a606fdb6f7ffa90b651639d89cda879668b01b6d8d1fe9408ea1dd36c7329f22d18fb18075c3755e67072fcdba4c863838edfbfe5f71893a1372511b41e398953d537c5", 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r2 = dup3(r1, r0, 0x0) write$binfmt_elf32(r1, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x58) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000240)="de", 0x1}], 0x1, 0xfffff) fcntl$setstatus(r0, 0x4, 0x4000) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES16, @ANYRES32, @ANYPTR64], 0xfffffffffffffe87) 2018/04/17 00:47:55 executing program 6: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003000)=[{&(0x7f00000000c0)="260000001a00030207fffd73ffffff188100000003000000031d8568647ba3a2d188637e57e4", 0x26}], 0x1}, 0x0) syzkaller login: [ 44.070154] ip (3805) used greatest stack depth: 54656 bytes left [ 44.927467] ip (3885) used greatest stack depth: 54200 bytes left [ 45.554024] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.560647] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.584154] device bridge_slave_0 entered promiscuous mode [ 45.595256] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.601898] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.619747] device bridge_slave_0 entered promiscuous mode [ 45.638501] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.645129] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.674462] device bridge_slave_0 entered promiscuous mode [ 45.716383] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.722914] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.753479] device bridge_slave_0 entered promiscuous mode [ 45.767746] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.774335] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.806139] device bridge_slave_0 entered promiscuous mode [ 45.824443] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.831032] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.849595] device bridge_slave_1 entered promiscuous mode [ 45.863592] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.870225] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.880597] device bridge_slave_1 entered promiscuous mode [ 45.897474] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.904114] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.934195] device bridge_slave_0 entered promiscuous mode [ 45.951986] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.958561] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.972303] device bridge_slave_1 entered promiscuous mode [ 45.987108] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.993668] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.007576] device bridge_slave_1 entered promiscuous mode [ 46.015435] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.021947] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.055555] device bridge_slave_0 entered promiscuous mode [ 46.072966] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.082906] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.089478] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.106169] device bridge_slave_1 entered promiscuous mode [ 46.117373] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.125104] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.131681] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.171124] device bridge_slave_0 entered promiscuous mode [ 46.189318] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.195903] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.217171] device bridge_slave_1 entered promiscuous mode [ 46.224924] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.233944] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.249725] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.310570] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.317198] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.362922] device bridge_slave_1 entered promiscuous mode [ 46.371474] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.382113] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.390748] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.397285] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.434944] device bridge_slave_1 entered promiscuous mode [ 46.458907] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.467121] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.482421] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.530162] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.656535] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.685667] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.699961] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.741773] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.926719] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.330176] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.403310] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.413955] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.432723] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.558224] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.608389] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.661895] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.674719] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.713686] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.746211] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.804421] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.914741] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.967725] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.985790] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.005484] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.214740] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.613441] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.641605] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.693589] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.710565] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.839258] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.881293] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.905482] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.923834] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.984093] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.998215] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.057584] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.065580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.078634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.119427] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.130769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.155792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.188282] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.197924] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.210226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.223826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.242914] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.253409] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.261195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.279425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.313420] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.324393] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.334731] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.342023] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.351794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.392583] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.402221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.419879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.452898] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.464899] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.474355] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.482000] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.519835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.547740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.573743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.600482] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.610572] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.619173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.638645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.650075] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.670144] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.678533] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.687604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.724508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.763268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.789483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.817686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.830991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.864134] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.882508] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.910136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.936575] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.944236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.957483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.004194] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.012468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.045800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.157476] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.164781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.173800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.843562] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.850159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.857135] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.863642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.899389] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.907459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.935176] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.941702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.948633] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.955163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.037013] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.063617] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.070180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.077142] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.083625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.129122] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.149871] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.156412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.163361] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.169881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.242105] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.404662] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.411216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.418194] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.424719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.461119] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.471133] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.477665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.484571] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.491119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.500355] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.514394] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.520933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.527864] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.534384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.571120] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.581396] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.587944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.594867] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.601379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.633470] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.960182] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.976768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.007734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.036773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.057638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.065231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.074467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.749451] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.764072] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.886421] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.103563] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.185731] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.263240] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.281397] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.556974] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.573178] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.579548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.588083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.636339] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.642753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.660999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.750726] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.757608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.768741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.962226] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.968594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.977859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.015351] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.025761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.048391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.079353] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.101279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.135253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.260839] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.267252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.277174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.449124] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.455545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.470689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/17 00:48:22 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x4000000000001) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xdcd, @remote={0xfe, 0x80, [], 0xbb}, 0x200000007}, 0x1c) 2018/04/17 00:48:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x800000003, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000005ff0)={0x1, &(0x7f0000964ff8)=[{0x6}]}, 0x10) dup2(r0, r1) getegid() 2018/04/17 00:48:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x800000003, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x6}, 0x4) dup2(r0, r1) 2018/04/17 00:48:23 executing program 1: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"6966623000faffffffffffffff00", 0x4003}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="4000000c000000000000000000000000000000000000aa000000000000000000000200000000000000e700", @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x3) 2018/04/17 00:48:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x800000003, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000005ff0)={0x1, &(0x7f0000964ff8)=[{0x6}]}, 0x10) dup2(r0, r1) getegid() 2018/04/17 00:48:23 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000140)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x0, @rand_addr}}) 2018/04/17 00:48:23 executing program 3: timer_create(0x3, &(0x7f0000000040)={0x0, 0x6, 0x1, @tid=0xffffffffffffffff}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000100)={{}, {0x0, 0x989680}}, &(0x7f0000000140)) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000080)) memfd_create(&(0x7f00000001c0)="24776c616e3173656c66126e6f646576766d6e65743000", 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x1, 0x90, [0x0, 0x20000640, 0x20000670, 0x200006a0], 0x0, &(0x7f0000000000), &(0x7f0000000640)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {}, {}]}, 0x108) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x11, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'none\x00'}, 0x2c) 2018/04/17 00:48:23 executing program 5: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000100)=""/52) 2018/04/17 00:48:23 executing program 7: syz_emit_ethernet(0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd608fd65d00200005000000000000000000000000000000bbfe8000000000000000000000000000bb0002000000000000040100000100c2045f000000000000089078"], &(0x7f0000000000)) 2018/04/17 00:48:23 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000100)=""/52) 2018/04/17 00:48:23 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = dup(r0) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x0, 0x0, 0x0, {0xf}}, 0x14}, 0x1}, 0x1) 2018/04/17 00:48:24 executing program 0: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000700)="1f0000000104fffffd3b000007110000fb0501000b000500000423ca0000cf", 0x1f) [ 70.115748] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 70.162703] netlink: 'syz-executor0': attribute type 5 has an invalid length. 2018/04/17 00:48:24 executing program 7: r0 = socket$inet(0x15, 0x5, 0x0) getsockopt$inet_mreqn(r0, 0x114, 0x2717, &(0x7f0000000040)={@remote, @remote}, &(0x7f0000000000)=0xc) 2018/04/17 00:48:24 executing program 6: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) umount2(&(0x7f0000000180)='./file0\x00', 0x0) 2018/04/17 00:48:24 executing program 3: timer_create(0x3, &(0x7f0000000040)={0x0, 0x6, 0x1, @tid=0xffffffffffffffff}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000100)={{}, {0x0, 0x989680}}, &(0x7f0000000140)) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000080)) memfd_create(&(0x7f00000001c0)="24776c616e3173656c66126e6f646576766d6e65743000", 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x1, 0x90, [0x0, 0x20000640, 0x20000670, 0x200006a0], 0x0, &(0x7f0000000000), &(0x7f0000000640)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {}, {}]}, 0x108) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x11, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'none\x00'}, 0x2c) 2018/04/17 00:48:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x800000003, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000005ff0)={0x1, &(0x7f0000964ff8)=[{0x6}]}, 0x10) dup2(r0, r1) getegid() 2018/04/17 00:48:24 executing program 1: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"6966623000faffffffffffffff00", 0x4003}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="4000000c000000000000000000000000000000000000aa000000000000000000000200000000000000e700", @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x3) 2018/04/17 00:48:24 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f0000000dc0)="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", 0x4d1, 0xfffffffffffffffc) 2018/04/17 00:48:24 executing program 0: mkdir(&(0x7f0000578000)='./file0\x00', 0x0) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000000000)=@known='system.posix_acl_default\x00', &(0x7f000054afec)="0200000001000000000000000200000200000000", 0x14, 0x0) 2018/04/17 00:48:24 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/nfsfs\x00') getdents64(r0, &(0x7f00000000c0)=""/40, 0x3c0) [ 70.203171] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. 2018/04/17 00:48:24 executing program 5: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000000100)="5500000018007fafb72d1cb230a2f9930a04000000a8430891053d693900090020000000020000001900050000000000000000dc13a7ec5038d5440700000000000000fbbea3f4684c61a0029b6283de4407aa7227", 0x55}], 0x1, &(0x7f0000006000)}, 0x0) 2018/04/17 00:48:24 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="d179f2060000000000000008a230e7a657f9cc6e", 0x14) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001480)="097ad7932fdcf79034fae8f23a5b6b36", 0x10}], 0x1, &(0x7f0000000100)}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) 2018/04/17 00:48:24 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x41, 0x0) 2018/04/17 00:48:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x800000003, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000005ff0)={0x1, &(0x7f0000964ff8)=[{0x6}]}, 0x10) dup2(r0, r1) 2018/04/17 00:48:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x2200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000abe000), 0x1}}, r0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/17 00:48:24 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000617fc9), 0x84, 0x20000000, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) write(r0, &(0x7f0000000040)="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", 0x6f1) 2018/04/17 00:48:24 executing program 0: r0 = socket$inet(0x15, 0x5, 0x0) getsockopt$inet_mreqn(r0, 0x114, 0x200002713, &(0x7f0000000040)={@remote, @remote}, &(0x7f0000000000)=0xc) 2018/04/17 00:48:24 executing program 1: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="cc1373fc000000000000000000000000000000000000000000000000000000003030b86e0d5f4090902c6457136cf04d000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f0000016000)) 2018/04/17 00:48:24 executing program 5: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f0000000dc0)="87", 0x1, 0xfffffffffffffffc) 2018/04/17 00:48:24 executing program 2: perf_event_open(&(0x7f0000000240)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x5) [ 70.854574] ================================================================== [ 70.862026] BUG: KMSAN: uninit-value in gcmaes_decrypt+0x2ec/0xea0 [ 70.868375] CPU: 1 PID: 5842 Comm: syz-executor7 Not tainted 4.16.0+ #84 [ 70.875229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.884598] Call Trace: [ 70.887212] dump_stack+0x185/0x1d0 [ 70.890872] ? gcmaes_decrypt+0x2ec/0xea0 [ 70.895047] kmsan_report+0x142/0x240 [ 70.898872] __msan_warning_32+0x6c/0xb0 [ 70.902951] gcmaes_decrypt+0x2ec/0xea0 [ 70.906954] generic_gcmaes_decrypt+0x181/0x1e0 [ 70.911816] ? generic_gcmaes_encrypt+0x1e0/0x1e0 [ 70.916674] gcmaes_wrapper_decrypt+0x2f5/0x340 [ 70.921356] ? gcmaes_wrapper_encrypt+0x2d0/0x2d0 [ 70.926218] crypto_rfc4543_crypt+0xaec/0xb40 [ 70.930730] ? crypto_has_alg+0x280/0x280 [ 70.934971] crypto_rfc4543_decrypt+0x47/0x50 [ 70.939484] ? crypto_rfc4543_encrypt+0x60/0x60 [ 70.944170] aead_recvmsg+0x25b5/0x2960 [ 70.948202] sock_recvmsg+0x1d0/0x230 [ 70.952018] ? aead_sendmsg+0x1b0/0x1b0 [ 70.956012] ___sys_recvmsg+0x3fb/0x810 [ 70.960058] ? __fget_light+0x56/0x710 [ 70.963956] ? __fdget+0x4e/0x60 [ 70.967334] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 70.972706] ? __fget_light+0x6b9/0x710 [ 70.976701] SYSC_recvmsg+0x298/0x3c0 [ 70.980520] SyS_recvmsg+0x54/0x80 [ 70.984070] do_syscall_64+0x309/0x430 [ 70.987971] ? ___sys_recvmsg+0x810/0x810 [ 70.992192] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 70.997385] RIP: 0033:0x455329 [ 71.000575] RSP: 002b:00007fe5db281c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 71.008293] RAX: ffffffffffffffda RBX: 00007fe5db2826d4 RCX: 0000000000455329 [ 71.015581] RDX: 0000000000000000 RSI: 0000000020001440 RDI: 0000000000000014 [ 71.022866] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 71.030152] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 71.037442] R13: 0000000000000496 R14: 00000000006f9eb0 R15: 0000000000000000 [ 71.044726] [ 71.046442] Uninit was created at: [ 71.050035] kmsan_internal_poison_shadow+0xb8/0x1b0 [ 71.055162] kmsan_kmalloc+0x94/0x100 [ 71.058988] __kmalloc+0x23c/0x350 [ 71.062540] sock_kmalloc+0x14e/0x270 [ 71.066371] af_alg_alloc_areq+0x85/0x320 [ 71.070535] aead_recvmsg+0x65a/0x2960 [ 71.074446] sock_recvmsg+0x1d0/0x230 [ 71.078277] ___sys_recvmsg+0x3fb/0x810 [ 71.082237] SYSC_recvmsg+0x298/0x3c0 [ 71.086118] SyS_recvmsg+0x54/0x80 [ 71.089650] do_syscall_64+0x309/0x430 [ 71.093533] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 71.098719] ================================================================== [ 71.106070] Disabling lock debugging due to kernel taint [ 71.111516] Kernel panic - not syncing: panic_on_warn set ... [ 71.111516] [ 71.118883] CPU: 1 PID: 5842 Comm: syz-executor7 Tainted: G B 4.16.0+ #84 [ 71.127012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.136366] Call Trace: [ 71.138954] dump_stack+0x185/0x1d0 [ 71.142590] panic+0x39d/0x940 [ 71.145778] ? gcmaes_decrypt+0x2ec/0xea0 [ 71.149921] kmsan_report+0x238/0x240 [ 71.153713] __msan_warning_32+0x6c/0xb0 [ 71.157764] gcmaes_decrypt+0x2ec/0xea0 [ 71.161737] generic_gcmaes_decrypt+0x181/0x1e0 [ 71.166410] ? generic_gcmaes_encrypt+0x1e0/0x1e0 [ 71.171245] gcmaes_wrapper_decrypt+0x2f5/0x340 [ 71.175899] ? gcmaes_wrapper_encrypt+0x2d0/0x2d0 [ 71.180741] crypto_rfc4543_crypt+0xaec/0xb40 [ 71.185229] ? crypto_has_alg+0x280/0x280 [ 71.189455] crypto_rfc4543_decrypt+0x47/0x50 [ 71.193949] ? crypto_rfc4543_encrypt+0x60/0x60 [ 71.198617] aead_recvmsg+0x25b5/0x2960 [ 71.202591] sock_recvmsg+0x1d0/0x230 [ 71.206377] ? aead_sendmsg+0x1b0/0x1b0 [ 71.210341] ___sys_recvmsg+0x3fb/0x810 [ 71.214336] ? __fget_light+0x56/0x710 [ 71.218212] ? __fdget+0x4e/0x60 [ 71.221655] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 71.227012] ? __fget_light+0x6b9/0x710 [ 71.230999] SYSC_recvmsg+0x298/0x3c0 [ 71.234807] SyS_recvmsg+0x54/0x80 [ 71.238344] do_syscall_64+0x309/0x430 [ 71.242222] ? ___sys_recvmsg+0x810/0x810 [ 71.246365] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 71.251563] RIP: 0033:0x455329 [ 71.254737] RSP: 002b:00007fe5db281c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 71.262533] RAX: ffffffffffffffda RBX: 00007fe5db2826d4 RCX: 0000000000455329 [ 71.269805] RDX: 0000000000000000 RSI: 0000000020001440 RDI: 0000000000000014 [ 71.277074] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 71.284352] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 71.291611] R13: 0000000000000496 R14: 00000000006f9eb0 R15: 0000000000000000 [ 71.299484] Dumping ftrace buffer: [ 71.303016] (ftrace buffer empty) [ 71.306704] Kernel Offset: disabled [ 71.310308] Rebooting in 86400 seconds.. serialport: VM disconnected.