INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.40' (ECDSA) to the list of known hosts. 2018/04/19 04:44:01 fuzzer started 2018/04/19 04:44:01 dialing manager at 10.128.0.26:44151 2018/04/19 04:44:08 kcov=true, comps=false 2018/04/19 04:44:11 executing program 0: 2018/04/19 04:44:11 executing program 1: 2018/04/19 04:44:11 executing program 7: 2018/04/19 04:44:11 executing program 4: 2018/04/19 04:44:11 executing program 2: 2018/04/19 04:44:11 executing program 3: 2018/04/19 04:44:11 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/82, 0x52}, {&(0x7f0000000240)=""/161, 0xa1}], 0x2, 0x0) 2018/04/19 04:44:11 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x1a1) r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) accept4(r0, &(0x7f0000000080)=@ipx, &(0x7f0000000100)=0xffffffffffffffd5, 0x0) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) syzkaller login: [ 44.934631] ip (3740) used greatest stack depth: 54688 bytes left [ 45.545282] ip (3797) used greatest stack depth: 54672 bytes left [ 45.612885] ip (3803) used greatest stack depth: 54312 bytes left [ 46.430588] ip (3886) used greatest stack depth: 54200 bytes left [ 46.739619] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.746154] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.785651] device bridge_slave_0 entered promiscuous mode [ 46.830479] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.836986] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.881638] device bridge_slave_0 entered promiscuous mode [ 46.901441] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.907893] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.946013] device bridge_slave_0 entered promiscuous mode [ 46.974163] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.980686] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.004561] device bridge_slave_0 entered promiscuous mode [ 47.039526] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.046024] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.081633] device bridge_slave_0 entered promiscuous mode [ 47.099275] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.105778] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.122821] device bridge_slave_0 entered promiscuous mode [ 47.130487] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.137013] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.147863] device bridge_slave_1 entered promiscuous mode [ 47.161284] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.167791] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.177949] device bridge_slave_1 entered promiscuous mode [ 47.190690] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.197134] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.209967] device bridge_slave_1 entered promiscuous mode [ 47.223281] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.229838] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.253707] device bridge_slave_1 entered promiscuous mode [ 47.269753] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.276229] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.290982] device bridge_slave_0 entered promiscuous mode [ 47.299920] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.306375] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.322984] device bridge_slave_1 entered promiscuous mode [ 47.330511] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.336935] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.354580] device bridge_slave_0 entered promiscuous mode [ 47.365750] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.375843] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.382324] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.415613] device bridge_slave_1 entered promiscuous mode [ 47.424657] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.434647] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.442994] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.451975] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.458427] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.515967] device bridge_slave_1 entered promiscuous mode [ 47.525369] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.531887] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.560001] device bridge_slave_1 entered promiscuous mode [ 47.569516] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.577117] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.592730] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.619748] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.642447] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.651761] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.728430] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.767745] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.806631] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.856100] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.920354] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.008280] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.034389] ip (3997) used greatest stack depth: 53656 bytes left [ 48.565013] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.573188] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.582882] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.593280] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.725408] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.785457] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.822575] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.831382] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.843382] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.874904] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.929899] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.968412] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.981632] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.089373] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.194719] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.204948] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.739262] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.776550] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.838406] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.858634] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.926636] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.953081] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.969702] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.058569] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.080168] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.092436] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.148523] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.155938] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.177657] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.184874] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.195762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.236021] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.246134] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.264848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.305465] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.318491] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.325763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.357499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.379608] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.387209] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.399510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.416488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.442288] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.452748] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.473950] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.482633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.491168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.518804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.542245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.573222] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.580780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.590935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.608419] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.617272] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.629291] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.639922] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.649732] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.657650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.701876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.737686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.776512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.796401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.811566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.819651] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.827744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.836364] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.854858] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.865438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.877612] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.895992] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.904141] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.915445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.943682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.978867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.017766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.045642] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.071799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.102937] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.122763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.166761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.839204] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.845715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.852610] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.859130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.917235] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.927955] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.945535] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.952008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.958904] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.965357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.991155] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.017940] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.024411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.031294] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.037756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.094242] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.108129] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.114603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.121471] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.127927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.169862] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.187069] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.193546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.200404] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.206896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.264927] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.329155] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.335634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.342477] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.348917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.431375] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.452225] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.458697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.465554] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.472016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.528993] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.597074] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.603563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.610430] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.616880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.671960] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.984143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.997784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.048805] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.065683] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.082732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.098565] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.105724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.228671] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.437564] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.496858] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.604766] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.686093] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.868955] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.888498] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 63.020896] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.027147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.041575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.154140] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 63.164418] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.170661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.186087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.307827] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.314195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.338098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.419970] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.426304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.440569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.488786] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.495692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.527149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.654877] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.661171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.671871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.779914] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.786490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.797433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.931275] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.937680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.952008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/19 04:44:37 executing program 2: 2018/04/19 04:44:37 executing program 3: 2018/04/19 04:44:38 executing program 4: 2018/04/19 04:44:38 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000b40), 0x39a, 0x20020003, &(0x7f0000000b00)={0x2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffb, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x7fff, 0x80000001}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f00000001c0)=0xfffffffffffff002, 0x4) sendto$inet(r0, &(0x7f0000000100)="10", 0x1, 0x0, &(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14}}, 0x10) 2018/04/19 04:44:38 executing program 3: clone(0x200, &(0x7f0000000040), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000dacfc9)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000280)) r0 = syz_open_procfs(0x0, &(0x7f000042cff4)='io\x00') pread64(r0, &(0x7f00000003c0), 0x62f, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000380)) open$dir(&(0x7f0000000080)='./file0\x00', 0x27e, 0x0) 2018/04/19 04:44:38 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="d179f2508fb13583605d0008a230e7a657f9cc6e", 0x14) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000036c0)=[{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000640)="3e59fe04bae75cfd14f526e0acc3c48c", 0x10}], 0x1}], 0x1, 0x0) recvmsg(r1, &(0x7f00000001c0)={&(0x7f0000000140)=@nfc_llcp, 0x80, &(0x7f0000000200)=[{&(0x7f0000000300)=""/88, 0x1e}], 0x1, &(0x7f00009f2000)=""/190, 0xbe}, 0x0) 2018/04/19 04:44:38 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x7, 0x40040) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000001380)={0xffffffffffffffff}) r3 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0\x00', 0x1, 0x100) getsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x10) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001400)='/dev/hwrng\x00', 0x10000, 0x0) socketpair$inet6(0xa, 0x80007, 0x1, &(0x7f0000001440)={0xffffffffffffffff}) r6 = syz_open_dev$sndseq(&(0x7f0000001480)='/dev/snd/seq\x00', 0x0, 0x400481) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f00000014c0)={0xffffffffffffffff}) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = accept4(0xffffffffffffff9c, &(0x7f0000001500)=@generic, &(0x7f0000001580)=0x80, 0x80000) r11 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r12 = accept4$unix(0xffffffffffffff9c, &(0x7f00000015c0), &(0x7f0000001640)=0x6e, 0x800) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000001680)={0xffffffffffffffff}) r14 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001700)={&(0x7f00000016c0)='./file0\x00', 0x0, 0x18}, 0x10) r15 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000001740)='cgroup.type\x00', 0x2, 0x0) r16 = socket(0x10, 0x5, 0x100000000) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000001780)={0xffffffffffffffff}) pipe2(&(0x7f00000017c0)={0xffffffffffffffff}, 0x80000) r19 = dup(0xffffffffffffff9c) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000001800)={0x0, 0x80000, 0xffffffffffffffff}) r21 = accept4$llc(0xffffffffffffff9c, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001880)=0x10, 0x80000) r22 = getpgid(0x0) fstat(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r0, &(0x7f0000001a80)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="65e8f5589109ee9d623d5a0ed81e7763f58b297411f6f32e14142db6731c14ae1da4f06a315857b04dcf0fd2cde47b6f2fe3cad0bfe6f83f6b6919646dd63140045523269cd814fdf6d37d6bd2b677dadb6464f8f985115b38724ba46c1ec42e4c335f5bf1a6b1c96f010cc7830a1ec2b2b93db5bb494378cb6bf45716cb7615093ff2b80fda6927181f59a5ad9bb99ad241665bce4ee23b9d2deba13db642e9f1837f9ed4ca", 0xa6}, {&(0x7f00000012c0)="cf2645b3c168a2d148558a0aefc4aac7804bfef3f23ab9dc1e72f06cd79dfc3d904f70845e2683322d6b090098f94b09ba8aeb1bf8b427fb779c8a57475a46d05d98b31b65bff857f52514db843a6a310bd9704982c8f0f8dea3fff9db96297947e5a43f83e78fea3ddade5480809438c29231e212e36b996c7761e8cd479cce67c26dc019863401b913f816f508c25965f547ea93f3824e40773a83ecddd5dcae44cf76160cc20c2ad1", 0xaa}], 0x3, &(0x7f00000019c0)=ANY=[@ANYBLOB="38000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="00000411db50c18d3b97396c11af7000", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r14, @ANYRES32=r15, @ANYRES32=r16, @ANYRES32=r17, @ANYRES32=r18, @ANYRES32=r19, @ANYRES32=r20, @ANYRES32=r21, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r22, @ANYRES32=r23, @ANYRES32=r24, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x24004041}, 0x801) r25 = socket$packet(0x11, 0x8104, 0x300) setsockopt$packet_tx_ring(r25, 0x107, 0xd, &(0x7f0000000140)=@req={0xb61a, 0x1ff}, 0x10) 2018/04/19 04:44:38 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000080)={{0xfffffffffffffffd, 0x6}, 0x0, 0x0, 0xcd, {0x7fffffff, 0x1}, 0x3, 0x6}) r1 = memfd_create(&(0x7f0000000000)='/dev/sequencer2\x00', 0x1) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000100)={0x1}) bind$bt_l2cap(r1, &(0x7f0000000480)={0x1f, 0x1f, {0x5, 0xd51, 0x4, 0x2, 0x8, 0x8001}, 0x0, 0x6}, 0xe) r2 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$instantiate(0xc, r2, &(0x7f0000000380)="dd5ce96134596ce537fa360fab2fb9d5d6e5ab8773815e7e299112fea5bf416c2cb3586084d94e77f56ba29e888b68f0f4fe05d9acf64827ff10e531896284385efe18299c633cba2aff359d86cce930517c1fc6fe81c5732a1e5a4d8e4065e91d0b80", 0x63, r3) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, 0x0}) capset(&(0x7f00000001c0)={0x19980330, r4}, &(0x7f0000000200)={0x4, 0x4, 0x7fffffff, 0x401, 0x7, 0x3}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000240)) [ 69.525603] capability: warning: `syz-executor2' uses 32-bit capabilities (legacy support in use) [ 69.588257] ================================================================== [ 69.595672] BUG: KMSAN: uninit-value in gcmaes_decrypt+0x2ec/0xea0 [ 69.601994] CPU: 0 PID: 5733 Comm: syz-executor1 Not tainted 4.16.0+ #84 [ 69.608829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.618181] Call Trace: [ 69.620781] dump_stack+0x185/0x1d0 [ 69.624413] ? gcmaes_decrypt+0x2ec/0xea0 [ 69.628567] kmsan_report+0x142/0x240 [ 69.632374] __msan_warning_32+0x6c/0xb0 [ 69.636439] gcmaes_decrypt+0x2ec/0xea0 [ 69.640428] generic_gcmaes_decrypt+0x181/0x1e0 [ 69.645104] ? generic_gcmaes_encrypt+0x1e0/0x1e0 [ 69.649948] gcmaes_wrapper_decrypt+0x2f5/0x340 [ 69.654621] ? gcmaes_wrapper_encrypt+0x2d0/0x2d0 [ 69.659469] crypto_rfc4543_crypt+0xaec/0xb40 [ 69.663971] ? crypto_has_alg+0x280/0x280 [ 69.668124] crypto_rfc4543_decrypt+0x47/0x50 [ 69.672619] ? crypto_rfc4543_encrypt+0x60/0x60 [ 69.677289] aead_recvmsg+0x25b5/0x2960 [ 69.681286] sock_recvmsg+0x1d0/0x230 [ 69.685089] ? aead_sendmsg+0x1b0/0x1b0 [ 69.689071] ___sys_recvmsg+0x3fb/0x810 [ 69.693052] ? __fget_light+0x56/0x710 [ 69.696937] ? __fdget+0x4e/0x60 [ 69.700307] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 69.705674] ? __fget_light+0x6b9/0x710 [ 69.709664] SYSC_recvmsg+0x298/0x3c0 [ 69.713479] SyS_recvmsg+0x54/0x80 [ 69.717021] do_syscall_64+0x309/0x430 [ 69.720919] ? ___sys_recvmsg+0x810/0x810 [ 69.725073] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 69.730269] RIP: 0033:0x455329 [ 69.733470] RSP: 002b:00007f3e092e6c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 69.741174] RAX: ffffffffffffffda RBX: 00007f3e092e76d4 RCX: 0000000000455329 [ 69.748440] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000014 [ 69.755711] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 69.762982] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 69.770254] R13: 0000000000000496 R14: 00000000006f9eb0 R15: 0000000000000000 [ 69.777548] [ 69.779172] Uninit was created at: [ 69.782721] kmsan_internal_poison_shadow+0xb8/0x1b0 [ 69.787831] kmsan_kmalloc+0x94/0x100 [ 69.791632] __kmalloc+0x23c/0x350 [ 69.795175] sock_kmalloc+0x14e/0x270 [ 69.798976] af_alg_alloc_areq+0x85/0x320 [ 69.803126] aead_recvmsg+0x65a/0x2960 [ 69.807021] sock_recvmsg+0x1d0/0x230 [ 69.810826] ___sys_recvmsg+0x3fb/0x810 [ 69.814802] SYSC_recvmsg+0x298/0x3c0 [ 69.818605] SyS_recvmsg+0x54/0x80 [ 69.822144] do_syscall_64+0x309/0x430 [ 69.826040] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 69.831223] ================================================================== [ 69.838569] Disabling lock debugging due to kernel taint [ 69.844011] Kernel panic - not syncing: panic_on_warn set ... [ 69.844011] [ 69.851382] CPU: 0 PID: 5733 Comm: syz-executor1 Tainted: G B 4.16.0+ #84 [ 69.859516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.868865] Call Trace: [ 69.871460] dump_stack+0x185/0x1d0 [ 69.875090] panic+0x39d/0x940 [ 69.878303] ? gcmaes_decrypt+0x2ec/0xea0 [ 69.882452] kmsan_report+0x238/0x240 [ 69.886259] __msan_warning_32+0x6c/0xb0 [ 69.890323] gcmaes_decrypt+0x2ec/0xea0 [ 69.894310] generic_gcmaes_decrypt+0x181/0x1e0 [ 69.898987] ? generic_gcmaes_encrypt+0x1e0/0x1e0 [ 69.903836] gcmaes_wrapper_decrypt+0x2f5/0x340 [ 69.908510] ? gcmaes_wrapper_encrypt+0x2d0/0x2d0 [ 69.913360] crypto_rfc4543_crypt+0xaec/0xb40 [ 69.917863] ? crypto_has_alg+0x280/0x280 [ 69.922026] crypto_rfc4543_decrypt+0x47/0x50 [ 69.926529] ? crypto_rfc4543_encrypt+0x60/0x60 [ 69.931201] aead_recvmsg+0x25b5/0x2960 [ 69.935218] sock_recvmsg+0x1d0/0x230 [ 69.939027] ? aead_sendmsg+0x1b0/0x1b0 [ 69.943009] ___sys_recvmsg+0x3fb/0x810 [ 69.946993] ? __fget_light+0x56/0x710 [ 69.950876] ? __fdget+0x4e/0x60 [ 69.954245] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 69.959612] ? __fget_light+0x6b9/0x710 [ 69.963604] SYSC_recvmsg+0x298/0x3c0 [ 69.967415] SyS_recvmsg+0x54/0x80 [ 69.970958] do_syscall_64+0x309/0x430 [ 69.974849] ? ___sys_recvmsg+0x810/0x810 [ 69.979007] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 69.984194] RIP: 0033:0x455329 [ 69.987383] RSP: 002b:00007f3e092e6c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 69.995094] RAX: ffffffffffffffda RBX: 00007f3e092e76d4 RCX: 0000000000455329 [ 70.002360] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000014 [ 70.009628] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 70.016889] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 70.024147] R13: 0000000000000496 R14: 00000000006f9eb0 R15: 0000000000000000 [ 70.031881] Dumping ftrace buffer: [ 70.035401] (ftrace buffer empty) [ 70.039091] Kernel Offset: disabled [ 70.042692] Rebooting in 86400 seconds..