INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.24' (ECDSA) to the list of known hosts. 2018/04/07 03:23:53 fuzzer started 2018/04/07 03:23:53 dialing manager at 10.128.0.26:38639 2018/04/07 03:23:59 kcov=true, comps=false 2018/04/07 03:24:02 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x27, 0x331, 0x0, 0x0, {0x12}}, 0x14}, 0x1}, 0x0) 2018/04/07 03:24:02 executing program 1: mkdir(&(0x7f0000281000)='./file0\x00', 0x0) chroot(&(0x7f0000056000)='./file0\x00') chdir(&(0x7f0000000080)='..') mount(&(0x7f0000153000)='./file0\x00', &(0x7f0000dac000)='..', &(0x7f0000914000)='nfs4\x00', 0x84000, &(0x7f0000f4a000)) 2018/04/07 03:24:02 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000638edf), 0x0, 0xfffffefffffffffe, &(0x7f0000fd6fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f000081c000)=""/169, &(0x7f0000000000)=0xa9) 2018/04/07 03:24:02 executing program 4: mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0xfffffffffffffffe, 0x4d031, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000ffc), 0x85, 0x0, &(0x7f0000000040), &(0x7f0000000ffc), 0x0) 2018/04/07 03:24:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x20, 0x2d, 0xaff, 0x0, 0x0, {0x3}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @binary='\b'}]}]}, 0x20}, 0x1}, 0x0) 2018/04/07 03:24:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000000000)={0x18, 0x2d, 0xb01, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}, 0x1}, 0x0) 2018/04/07 03:24:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f00000001c0)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x18, 0x2d, 0x100000b01, 0x0, 0x0, {0x3}, [@generic="be"]}, 0x18}, 0x1}, 0x0) 2018/04/07 03:24:02 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0xffffffff, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x20020003, &(0x7f0000000180)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f0000006b80)=[{{&(0x7f0000002f80)=@vsock={0x28, 0x0, 0x0, @my}, 0x10, &(0x7f0000003180), 0x0, &(0x7f00000031c0)}}, {{&(0x7f0000003480)=@vsock={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10, &(0x7f0000005780), 0x8d, &(0x7f0000005800)=[{0x10, 0x18d}], 0x10}}], 0x2, 0x0) syzkaller login: [ 41.910092] ip (3748) used greatest stack depth: 54688 bytes left [ 41.999771] ip (3754) used greatest stack depth: 54672 bytes left [ 42.605386] ip (3812) used greatest stack depth: 54312 bytes left [ 43.568693] ip (3900) used greatest stack depth: 54200 bytes left [ 45.612592] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.660703] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.674312] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.736072] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.775926] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.786242] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.919273] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.998738] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.493837] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.630205] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.696545] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.731944] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.807781] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.881814] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.906407] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.007406] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.259970] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.266268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.278685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.396660] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.402955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.419462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.511613] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.517915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.528658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.558303] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.567615] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.574555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.606857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.632663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.651654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.688105] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.696513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.717652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.749830] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.764381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.810402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.867127] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.873417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.886629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/07 03:24:19 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000f00000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000f8f000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) writev(r1, &(0x7f0000376ff0)=[{&(0x7f00000d8ece)="15b0e0be203f09df4425333944b79497f675bc1ceb755264d28bb55850aacf65", 0x20}], 0x1) recvmmsg(r1, &(0x7f0000f75da8)=[{{&(0x7f0000b86000)=@ethernet={0x0, @link_local}, 0x10, &(0x7f00007e9fa0)=[{&(0x7f0000032000)=""/60, 0x3c}], 0x1, &(0x7f00002c4000)=""/52, 0x34}}], 0x1, 0x0, &(0x7f00002d9000)) 2018/04/07 03:24:19 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='loginuid\x00') pread64(r0, &(0x7f0000000280)=""/166, 0xa6, 0x0) 2018/04/07 03:24:19 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x100, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000001c0)=""/73, 0x49) 2018/04/07 03:24:19 executing program 7: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0xffffffffffffff22) tee(r1, r0, 0x40000003, 0x0) tee(r1, r0, 0x1, 0x0) dup2(r1, r3) 2018/04/07 03:24:19 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x11, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 2018/04/07 03:24:20 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000d6d000)={0x0, 0x2000000000069}, 0xb) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7ff, 0x4) read(r0, &(0x7f00005f6000)=""/99, 0x60f) 2018/04/07 03:24:20 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00007b5000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000172000), 0x4) 2018/04/07 03:24:20 executing program 4: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast=0xffffffff, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4, 0x0, 0xfffffffffffffffd}}, 0xe8) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/07 03:24:20 executing program 0: timer_create(0xfffffffffffffffb, &(0x7f0000000780)={0x0, 0x12}, &(0x7f0000044000)) 2018/04/07 03:24:20 executing program 7: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0xffffffffffffff22) tee(r1, r0, 0x40000003, 0x0) tee(r1, r0, 0x1, 0x0) dup2(r1, r3) 2018/04/07 03:24:20 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x11, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 2018/04/07 03:24:20 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x5e20, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x2}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 2018/04/07 03:24:20 executing program 4: sendmsg$unix(0xffffffffffffffff, &(0x7f0000833000)={&(0x7f0000564000)=@abs, 0x6e, &(0x7f00007e0000)=[{&(0x7f0000007000)="fd20932fcc7cfaafcf960802e02348f8fba600069da7a78a04a646", 0x1b}], 0x1, &(0x7f0000334f28)}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000970000)='/dev/sg#\x00', 0x0, 0xc0002) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x65}) ioctl(r0, 0x2285, &(0x7f0000007000)='S') 2018/04/07 03:24:20 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f0000000380)={{0x80, 0x3ff}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f000009ef58)={{0x80}, "706f7274310000004000000000000000000000d600fffffff0000000000000000000eda4000000000000000700"}) 2018/04/07 03:24:20 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="b40a2f2460fb88f25f"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xf5, 0x25}, [@ldst={0x7, 0x1}], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0x46f, &(0x7f000000cf3d)=""/195}, 0x48) 2018/04/07 03:24:20 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000f00000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000f8f000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) writev(r1, &(0x7f0000376ff0)=[{&(0x7f00000d8ece)="15b0e0be203f09df4425333944b79497f675bc1ceb755264d28bb55850aacf65", 0x20}], 0x1) recvmmsg(r1, &(0x7f0000f75da8)=[{{&(0x7f0000b86000)=@ethernet={0x0, @link_local}, 0x10, &(0x7f00007e9fa0)=[{&(0x7f0000032000)=""/60, 0x3c}], 0x1, &(0x7f00002c4000)=""/52, 0x34}}], 0x1, 0x0, &(0x7f00002d9000)) [ 58.068767] sd 0:0:1:0: [sg0] tag#718 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 58.078105] sd 0:0:1:0: [sg0] tag#718 CDB: Write attributes [ 58.084409] sd 0:0:1:0: [sg0] tag#718 CDB[00]: 8d 60 fb ff ff 41 83 c6 01 45 85 c9 0f 84 5c ed [ 58.093319] sd 0:0:1:0: [sg0] tag#718 CDB[10]: ff ff 45 84 e4 0f 84 53 ed ff ff 4d 63 e5 be 20 [ 58.102209] sd 0:0:1:0: [sg0] tag#718 CDB[20]: 00 00 00 48 89 df 4c 89 e2 e8 1e fb 00 00 49 39 [ 58.111131] sd 0:0:1:0: [sg0] tag#718 CDB[30]: c4 0f 85 18 f7 ff ff 41 81 fe fe ff ff 7f 0f 87 [ 58.120065] sd 0:0:1:0: [sg0] tag#718 CDB[40]: 64 0a 00 00 b8 ff ff ff 7f 44 29 f0 41 39 c5 0f [ 58.128974] sd 0:0:1:0: [sg0] tag#718 CDB[50]: 87 4e 01 00 00 45 01 ee e9 11 ed ff ff 48 8b 43 [ 58.137885] sd 0:0:1:0: [sg0] tag#718 CDB[60]: 28 48 3b 43 30 2018/04/07 03:24:21 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) 2018/04/07 03:24:21 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000000000)=[{0x18, 0x29, 0x4, "1b32"}], 0x18}}], 0x2, 0x0) 2018/04/07 03:24:21 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp\x00') bind$alg(r0, &(0x7f0000466000)={0x26, 'hash\x00', 0x0, 0x0, 'tgr160\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f0000a2effc), 0x78) 2018/04/07 03:24:21 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000f00000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000f8f000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) writev(r1, &(0x7f0000376ff0)=[{&(0x7f00000d8ece)="15b0e0be203f09df4425333944b79497f675bc1ceb755264d28bb55850aacf65", 0x20}], 0x1) recvmmsg(r1, &(0x7f0000f75da8)=[{{&(0x7f0000b86000)=@ethernet={0x0, @link_local}, 0x10, &(0x7f00007e9fa0)=[{&(0x7f0000032000)=""/60, 0x3c}], 0x1, &(0x7f00002c4000)=""/52, 0x34}}], 0x1, 0x0, &(0x7f00002d9000)) 2018/04/07 03:24:21 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="b40a2f2460fb88f25f"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xf5, 0x25}, [@ldst={0x7, 0x1}], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0x46f, &(0x7f000000cf3d)=""/195}, 0x48) 2018/04/07 03:24:21 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x1000ffff) write$cgroup_pid(r2, &(0x7f0000000100)=ANY=[], 0x1023c) fallocate(r2, 0x3, 0x0, 0x1a8) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000300)={0x0, 0x100, 0x1}) 2018/04/07 03:24:21 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-simd)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000f8dfc8)={0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000000)}, 0x0) 2018/04/07 03:24:21 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x26, &(0x7f000001d000)={0x0, 0x0, 0x0, 0x80}) fcntl$lock(r0, 0x5, &(0x7f0000e0a000)={0x0, 0x0, 0x0, 0x6}) 2018/04/07 03:24:22 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001500)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(echainiv(ccm(serpent-generic)))\x00'}, 0x5d) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)='\n\au', 0x3) r1 = accept$alg(r0, 0x0, 0x0) write(r1, &(0x7f00000027c0)="8178b5988ffff69dac0f010979ea2a04", 0x10) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) 2018/04/07 03:24:22 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001500)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(echainiv(ccm(serpent-generic)))\x00'}, 0x5d) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)='\n\au', 0x3) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000002680)=[{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) 2018/04/07 03:24:22 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) clone(0x0, &(0x7f000075cf53), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000923000)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000064e000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) tkill(r0, 0x15) wait4(0x0, 0x0, 0x60000002, &(0x7f0000a94f70)) 2018/04/07 03:24:22 executing program 6: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r0, r0, &(0x7f0000000080)=0x3fffffff, 0x4) 2018/04/07 03:24:22 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000f00000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000f8f000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) writev(r1, &(0x7f0000376ff0)=[{&(0x7f00000d8ece)="15b0e0be203f09df4425333944b79497f675bc1ceb755264d28bb55850aacf65", 0x20}], 0x1) recvmmsg(r1, &(0x7f0000f75da8)=[{{&(0x7f0000b86000)=@ethernet={0x0, @link_local}, 0x10, &(0x7f00007e9fa0)=[{&(0x7f0000032000)=""/60, 0x3c}], 0x1, &(0x7f00002c4000)=""/52, 0x34}}], 0x1, 0x0, &(0x7f00002d9000)) 2018/04/07 03:24:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x7c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x4, 0x32, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)) 2018/04/07 03:24:22 executing program 4: sendto$inet(0xffffffffffffffff, &(0x7f0000de1fff), 0x0, 0x20008045, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup\x00', 0x200002, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x1000ffff) write$cgroup_pid(r2, &(0x7f0000000100)=ANY=[], 0x1023c) fallocate(r2, 0x3, 0x7fff, 0x1a8) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000300)={0x0, 0x100, 0x1}) sync() setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000451ff8)={@multicast1=0xe0000001}, 0x8) 2018/04/07 03:24:22 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-simd)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000f8dfc8)={0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000000)}, 0x0) 2018/04/07 03:24:22 executing program 0: mmap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000f0c000)='clear_refs\x00') writev(r0, &(0x7f0000d69ff0)=[{&(0x7f000019ffff)='2', 0x1}], 0x1) 2018/04/07 03:24:22 executing program 6: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) unshare(0x20000) r0 = syz_open_procfs(0x0, &(0x7f0000044000)='ns/mnt\x00') setns(r0, 0x0) clone(0x30020100, &(0x7f00002c9000), &(0x7f0000d70ffc), &(0x7f00001cc000), &(0x7f0000000080)) 2018/04/07 03:24:22 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-simd)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000f8dfc8)={0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000000)}, 0x0) 2018/04/07 03:24:22 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000f00000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000f8f000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000f75da8)=[{{&(0x7f0000b86000)=@ethernet={0x0, @link_local}, 0x10, &(0x7f00007e9fa0)=[{&(0x7f0000032000)=""/60, 0x3c}], 0x1, &(0x7f00002c4000)=""/52, 0x34}}], 0x1, 0x0, &(0x7f00002d9000)) 2018/04/07 03:24:22 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r1, &(0x7f0000000100)=ANY=[], 0x1023c) truncate(&(0x7f0000000100)='./file0\x00', 0xb6b7) write(r1, &(0x7f0000000180)="15", 0x1) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x4001, 0x0) sendfile(r3, r2, &(0x7f0000002b80), 0x7fffffff) 2018/04/07 03:24:22 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(aes-aesni)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) write(r1, &(0x7f0000000240)="79c737ffe18186d67dba3f649a7ba85e309b4949b81f3647ad78ae12cb59fb76", 0x20) recvmsg(r1, &(0x7f0000158000)={&(0x7f0000000080)=@nfc_llcp, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)=""/25, 0x19}, {&(0x7f0000000180)=""/118, 0x76}], 0x2, &(0x7f0000000000)}, 0x0) 2018/04/07 03:24:22 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r1, &(0x7f0000000100)=ANY=[], 0x1023c) truncate(&(0x7f0000000100)='./file0\x00', 0x0) write(r1, &(0x7f0000000180)="15", 0x1) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x4001, 0x0) sendfile(r3, r2, &(0x7f0000002b80), 0x7fffffff) 2018/04/07 03:24:22 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-simd)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000f8dfc8)={0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000000)}, 0x0) 2018/04/07 03:24:23 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001500)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(echainiv(ccm(serpent-generic)))\x00'}, 0x5d) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)='\n\au', 0x3) r1 = accept$alg(r0, 0x0, 0x0) write(r1, &(0x7f00000027c0)="8178b5988ffff69dac0f010979ea2a04", 0x10) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) 2018/04/07 03:24:23 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001500)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(echainiv(ccm(serpent-generic)))\x00'}, 0x5d) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)='\n\au', 0x3) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000002680)=[{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) 2018/04/07 03:24:23 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001500)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(echainiv(ccm(serpent-generic)))\x00'}, 0x5d) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)='\n\au', 0x3) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000002680)=[{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) 2018/04/07 03:24:23 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000f00000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000f8f000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000f75da8)=[{{&(0x7f0000b86000)=@ethernet={0x0, @link_local}, 0x10, &(0x7f00007e9fa0)=[{&(0x7f0000032000)=""/60, 0x3c}], 0x1, &(0x7f00002c4000)=""/52, 0x34}}], 0x1, 0x0, &(0x7f00002d9000)) 2018/04/07 03:24:23 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-simd)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000), 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000f8dfc8)={0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000000)}, 0x0) 2018/04/07 03:24:23 executing program 6: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast=0xffffffff}, 0x10) sendmsg(r0, &(0x7f0000000200)={0x0, 0x214, &(0x7f0000000080)}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2018/04/07 03:24:23 executing program 4: mmap(&(0x7f0000000000/0x8b000)=nil, 0x8b000, 0x1000004, 0x10000032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000640)={0x0, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 'nq\x00'}, 0x2c) 2018/04/07 03:24:23 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(aes-aesni)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) write(r1, &(0x7f0000000240)="79c737ffe18186d67dba3f649a7ba85e309b4949b81f3647ad78ae12cb59fb76", 0x20) recvmsg(r1, &(0x7f0000158000)={&(0x7f0000000080)=@nfc_llcp, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)=""/25, 0x19}, {&(0x7f0000000180)=""/118, 0x76}], 0x2, &(0x7f0000000000)}, 0x0) 2018/04/07 03:24:24 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={"62726964676530001400", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0xffffff9e, 0x2}, [@NDA_LLADDR={0xa, 0x2, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}]}, 0x28}, 0x1}, 0x0) 2018/04/07 03:24:24 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001500)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(echainiv(ccm(serpent-generic)))\x00'}, 0x5d) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)='\n\au', 0x3) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000002680)=[{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) 2018/04/07 03:24:24 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001500)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(echainiv(ccm(serpent-generic)))\x00'}, 0x5d) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)='\n\au', 0x3) r1 = accept$alg(r0, 0x0, 0x0) write(r1, &(0x7f00000027c0)="8178b5988ffff69dac0f010979ea2a04", 0x10) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) 2018/04/07 03:24:24 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(aes-aesni)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) write(r1, &(0x7f0000000240)="79c737ffe18186d67dba3f649a7ba85e309b4949b81f3647ad78ae12cb59fb76", 0x20) recvmsg(r1, &(0x7f0000158000)={&(0x7f0000000080)=@nfc_llcp, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)=""/25, 0x19}, {&(0x7f0000000180)=""/118, 0x76}], 0x2, &(0x7f0000000000)}, 0x0) 2018/04/07 03:24:24 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-simd)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000), 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000f8dfc8)={0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000000)}, 0x0) 2018/04/07 03:24:24 executing program 5: r0 = socket(0xa, 0x802, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000040)=0x200, 0x2cf) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1c) 2018/04/07 03:24:24 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000400)=@nat={'nat\x00', 0x19, 0x6, 0x758, [0x20000ac0, 0x0, 0x0, 0x20000d20, 0x20001000], 0x0, &(0x7f0000000000), &(0x7f0000000ac0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x5, 0x0, 0x0, 'sit0\x00', 'bridge0\x00', 'eql\x00', 'syzkaller0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0xe0, 0xe0, 0x130, [@connlabel={'connlabel\x00', 0x8, {{0x0, 0xc12e7d40f74d8927}}}, @statistic={'statistic\x00', 0x18}]}}, @common=@log={'log\x00', 0x28, {{0x0, "0144b52e9eae7d8caff5a7bd09e6a5595c0a65a6aab8862874073d406df4"}}}}, {{{0x11, 0x0, 0x0, 'bpq0\x00', 'bond0\x00', 'eql\x00', 'yam0\x00', @random="6fbc7eb4c78d", [], @random="7955cfcf4729", [], 0xb8, 0xb8, 0x100, [@limit={'limit\x00', 0x20}]}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x0, 0x0, 0x3}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{{{0x3, 0x0, 0x0, 'bcsf0\x00', 'syzkaller0\x00', 'ip6_vti0\x00', 'ip6_vti0\x00', @random="3b6854ac28d6", [], @random="98256fe2bc05", [], 0xf0, 0x160, 0x198, [@owner={'owner\x00', 0x18}, @connbytes={'connbytes\x00', 0x18}]}, [@snat={'snat\x00', 0x10, {{@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}}}, @snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}]}, @arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2}}}}}, {{{0x11, 0x0, 0x0, 'lo\x00', 'tunl0\x00', 'tunl0\x00', '\x00', @random="b7a2f890eec1", [], @empty, [], 0xe0, 0xe0, 0x118, [@rateest={'rateest\x00', 0x48, {{'ipddp0\x00', 'syzkaller0\x00'}}}]}}, @arpreply={'arpreply\x00', 0x10, {{@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe, 0x2, [{{{0x5, 0x0, 0x0, 'bridge0\x00', 'vlan0\x00', 'ipddp0\x00', 'irlan0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xa0, 0xd8, 0x110, [@m802_3={'802_3\x00', 0x8}]}, [@snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}, {{{0x7, 0x0, 0x0, 'nr0\x00', 'eql\x00', 'ip_vti0\x00', 'rose0\x00', @random="b4c25608ca21", [], @link_local={0x1, 0x80, 0xc2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}}]}, {0x0, '\x00', 0x6, 0xfffffffffffffffc}]}, 0x7d0) 2018/04/07 03:24:24 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000f00000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000f8f000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000f75da8)=[{{&(0x7f0000b86000)=@ethernet={0x0, @link_local}, 0x10, &(0x7f00007e9fa0)=[{&(0x7f0000032000)=""/60, 0x3c}], 0x1, &(0x7f00002c4000)=""/52, 0x34}}], 0x1, 0x0, &(0x7f00002d9000)) 2018/04/07 03:24:24 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000f00000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000f8f000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) writev(0xffffffffffffffff, &(0x7f0000376ff0)=[{&(0x7f00000d8ece)="15b0e0be203f09df4425333944b79497f675bc1ceb755264d28bb55850aacf65", 0x20}], 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000f75da8)=[{{&(0x7f0000b86000)=@ethernet={0x0, @link_local}, 0x10, &(0x7f00007e9fa0)=[{&(0x7f0000032000)=""/60, 0x3c}], 0x1, &(0x7f00002c4000)=""/52, 0x34}}], 0x1, 0x0, &(0x7f00002d9000)) 2018/04/07 03:24:24 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001500)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(echainiv(ccm(serpent-generic)))\x00'}, 0x5d) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)='\n\au', 0x3) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000002680)=[{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) 2018/04/07 03:24:24 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) 2018/04/07 03:24:24 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-simd)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000), 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000f8dfc8)={0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000000)}, 0x0) 2018/04/07 03:24:24 executing program 6: r0 = socket$packet(0x11, 0x200000003, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x203, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [], 0xaa}}]}, 0x2c}, 0x1}, 0x0) 2018/04/07 03:24:24 executing program 5: mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r0 = open(&(0x7f00008db000)='./control\x00', 0x0, 0x0) seccomp(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) mknod(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000100)='./file0\x00', r0, &(0x7f0000000140)='./file0\x00') 2018/04/07 03:24:24 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(aes-aesni)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) write(r1, &(0x7f0000000240)="79c737ffe18186d67dba3f649a7ba85e309b4949b81f3647ad78ae12cb59fb76", 0x20) recvmsg(r1, &(0x7f0000158000)={&(0x7f0000000080)=@nfc_llcp, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)=""/25, 0x19}, {&(0x7f0000000180)=""/118, 0x76}], 0x2, &(0x7f0000000000)}, 0x0) 2018/04/07 03:24:24 executing program 2: mlock(&(0x7f000000f000/0x3000)=nil, 0x3000) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x2}, 0x1c) listen(r2, 0x0) sendto$inet6(r1, &(0x7f0000000040), 0xf152d246, 0x20000001, &(0x7f0000faafe4)={0xa, 0x2}, 0x1c) timer_create(0x0, &(0x7f000030c000)={0x0, 0x12}, &(0x7f0000264ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r3 = gettid() tkill(r3, 0x16) close(r0) [ 61.544185] audit: type=1326 audit(1523071464.542:3): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=5320 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455259 code=0xffff0000 [ 61.588763] TCP: request_sock_TCPv6: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 61.764844] ================================================================== [ 61.772247] BUG: KMSAN: uninit-value in ghash_setkey+0x209/0x270 [ 61.778478] CPU: 1 PID: 5317 Comm: syz-executor4 Not tainted 4.16.0+ #81 [ 61.785300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 61.794648] Call Trace: [ 61.797224] dump_stack+0x185/0x1d0 [ 61.800845] ? ghash_setkey+0x209/0x270 [ 61.804808] kmsan_report+0x142/0x240 [ 61.808603] __msan_warning_32+0x6c/0xb0 [ 61.812663] ghash_setkey+0x209/0x270 [ 61.816459] ? ghash_final+0x1d0/0x1d0 [ 61.820328] crypto_shash_setkey+0x317/0x490 [ 61.824724] cryptd_hash_setkey+0x1a5/0x330 [ 61.829044] ? cryptd_hash_import+0x2a0/0x2a0 [ 61.833528] crypto_ahash_setkey+0x31a/0x470 [ 61.837923] ghash_async_setkey+0x1a5/0x330 [ 61.842245] ? ghash_async_import+0x3a0/0x3a0 [ 61.846741] crypto_ahash_setkey+0x31a/0x470 [ 61.851641] ? skcipher_encrypt_blkcipher+0x222/0x320 [ 61.856820] crypto_gcm_setkey+0xa3c/0xc10 [ 61.861052] ? crypto_gcm_exit_tfm+0xd0/0xd0 [ 61.865449] crypto_aead_setkey+0x373/0x4c0 [ 61.869755] aead_setkey+0xa0/0xc0 [ 61.873276] alg_setsockopt+0x6c5/0x740 [ 61.877235] ? aead_release+0x90/0x90 [ 61.881028] ? alg_accept+0xd0/0xd0 [ 61.884645] SYSC_setsockopt+0x4b8/0x570 [ 61.888695] SyS_setsockopt+0x76/0xa0 [ 61.892483] do_syscall_64+0x309/0x430 [ 61.896356] ? SYSC_recv+0xe0/0xe0 [ 61.899889] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 61.905071] RIP: 0033:0x455259 [ 61.908257] RSP: 002b:00007f08f428ac68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 61.915949] RAX: ffffffffffffffda RBX: 00007f08f428b6d4 RCX: 0000000000455259 [ 61.923203] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000013 [ 61.930457] RBP: 000000000072bea0 R08: 0000000000000010 R09: 0000000000000000 [ 61.937713] R10: 0000000020000040 R11: 0000000000000246 R12: 00000000ffffffff [ 61.944977] R13: 0000000000000510 R14: 00000000006faa20 R15: 0000000000000000 [ 61.952231] [ 61.953840] Uninit was stored to memory at: [ 61.958152] kmsan_internal_chain_origin+0x12b/0x210 [ 61.963240] __msan_chain_origin+0x69/0xc0 [ 61.967460] __crypto_xor+0x23c/0x16b0 [ 61.971332] crypto_ctr_crypt_inplace+0x29a/0x3a0 [ 61.976161] crypto_ctr_crypt+0x54c/0x7d0 [ 61.980302] skcipher_encrypt_blkcipher+0x222/0x320 [ 61.985308] crypto_gcm_setkey+0x6a3/0xc10 [ 61.989534] crypto_aead_setkey+0x373/0x4c0 [ 61.993851] aead_setkey+0xa0/0xc0 [ 61.997372] alg_setsockopt+0x6c5/0x740 [ 62.001332] SYSC_setsockopt+0x4b8/0x570 [ 62.005377] SyS_setsockopt+0x76/0xa0 [ 62.009159] do_syscall_64+0x309/0x430 [ 62.013038] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 62.018217] Local variable description: ----vla@crypto_ctr_crypt_inplace [ 62.025037] Variable was created at: [ 62.028759] crypto_ctr_crypt_inplace+0x19a/0x3a0 [ 62.033599] crypto_ctr_crypt+0x54c/0x7d0 [ 62.037725] ================================================================== [ 62.045074] Disabling lock debugging due to kernel taint [ 62.050505] Kernel panic - not syncing: panic_on_warn set ... [ 62.050505] [ 62.057855] CPU: 1 PID: 5317 Comm: syz-executor4 Tainted: G B 4.16.0+ #81 [ 62.065976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 62.075309] Call Trace: [ 62.077884] dump_stack+0x185/0x1d0 [ 62.081504] panic+0x39d/0x940 [ 62.084710] ? ghash_setkey+0x209/0x270 [ 62.088677] kmsan_report+0x238/0x240 [ 62.092468] __msan_warning_32+0x6c/0xb0 [ 62.096521] ghash_setkey+0x209/0x270 [ 62.100312] ? ghash_final+0x1d0/0x1d0 [ 62.104203] crypto_shash_setkey+0x317/0x490 [ 62.108595] cryptd_hash_setkey+0x1a5/0x330 [ 62.112900] ? cryptd_hash_import+0x2a0/0x2a0 [ 62.117380] crypto_ahash_setkey+0x31a/0x470 [ 62.121774] ghash_async_setkey+0x1a5/0x330 [ 62.126085] ? ghash_async_import+0x3a0/0x3a0 [ 62.130573] crypto_ahash_setkey+0x31a/0x470 [ 62.134970] ? skcipher_encrypt_blkcipher+0x222/0x320 [ 62.140149] crypto_gcm_setkey+0xa3c/0xc10 [ 62.144371] ? crypto_gcm_exit_tfm+0xd0/0xd0 [ 62.148767] crypto_aead_setkey+0x373/0x4c0 [ 62.153081] aead_setkey+0xa0/0xc0 [ 62.156606] alg_setsockopt+0x6c5/0x740 [ 62.160574] ? aead_release+0x90/0x90 [ 62.164358] ? alg_accept+0xd0/0xd0 [ 62.167972] SYSC_setsockopt+0x4b8/0x570 [ 62.172033] SyS_setsockopt+0x76/0xa0 [ 62.175839] do_syscall_64+0x309/0x430 [ 62.179718] ? SYSC_recv+0xe0/0xe0 [ 62.183243] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 62.188413] RIP: 0033:0x455259 [ 62.191587] RSP: 002b:00007f08f428ac68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 62.199291] RAX: ffffffffffffffda RBX: 00007f08f428b6d4 RCX: 0000000000455259 [ 62.206543] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000013 [ 62.213801] RBP: 000000000072bea0 R08: 0000000000000010 R09: 0000000000000000 [ 62.221072] R10: 0000000020000040 R11: 0000000000000246 R12: 00000000ffffffff [ 62.228339] R13: 0000000000000510 R14: 00000000006faa20 R15: 0000000000000000 [ 62.236051] Dumping ftrace buffer: [ 62.239574] (ftrace buffer empty) [ 62.243267] Kernel Offset: disabled [ 62.246881] Rebooting in 86400 seconds..