# https://syzkaller.appspot.com/bug?id=a38fc3fb577eb9e1bbd1ea1f0a031bd988e6c862 # See https://goo.gl/kgGztJ for information about syzkaller reproducers. #{Threaded:true Collide:true Repeat:true Procs:8 Sandbox:namespace Fault:false FaultCall:-1 FaultNth:0 EnableTun:true UseTmpDir:true HandleSegv:true WaitRepeat:true Debug:false Repro:false} mmap(&(0x7f0000000000/0xf3b000)=nil, 0xf3b000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000e1e000)={0x26, "6861736800000000000000000000", 0x0, 0x0, "7368613531325f6d6200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) mmap(&(0x7f0000f3b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f3b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000f3c000-0xf5)="e1ddaa529ae5b555d9c084048ba4bed6c0c871213ae79e1a6f79a892626b67c819c172712921bf5eb4dfebf12736a40cdc0fa1d67e4a106633c46216733c5707f76cc9e1ee4ff15d8f26db05330d66d23246d2b136451e863cad064221265e09d65b32f72e7302816d87151480c8deec6a4d406c663677a931705708a8e1392f6b5ef14832153fbb36860b608ca0d31ba56e515882dcfda6194340f164a5f15ad38ff8861bc94bd3a5ec563727adf7f1a24ff167797881bfb986750d2dcb81825231db6e8198ba6cc2599195debf23492d3bf3d5e15de4608336c316586bc5caed7b51c379c549d1de8534abbcc1c4e2ed8142a4d8", 0xf5) mmap(&(0x7f0000f3b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000f3b000)={0x26, "7308006970020800000000000000", 0x0, 0x0, "6362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00004f7000)="649c47ad46390dc86dae79fa409d4d54", 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0xc) r1 = accept$alg(r0, 0x0, 0x0) bind$alg(r0, &(0x7f0000743000)={0x26, "736b636970686572000000000000", 0x0, 0x0, "63686163686132302d73696d64000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) dup(r0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x8) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000abe000)={0x0, 0x0, &(0x7f0000769000-0x10)=[{&(0x7f0000a95000-0x3d)="0cda5e1b78ab4cd5040d369241d55b3b0c15c2d769486935741fc701a6b9d0be38576a64", 0x24}], 0x1, &(0x7f0000f3a000)=[], 0x0, 0x4080}, 0x20000000) mmap(&(0x7f0000f3b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f3b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$alg(r2, &(0x7f0000f3c000-0x38)={0x0, 0x0, &(0x7f00007bd000+0xd7d)=[{&(0x7f00003b7000-0x1c)="b99e8774afda573c0a115ca433c8e241e935dacee2cce09019653569", 0x1c}, {&(0x7f0000b9e000)="c62ead8625f2e46fa137abd06e71cbea050000000000000027dcf64e05ac243aa26975277bbeeb16ece2afa18684a02ee8b2381c08a5629d36bf74c1a214bca7507755b84eb4fc263cf5e336d210d21fa6884aae43e9a49216b9bf74598b093a36334f2c631dc2948b8ca45d4e2eecdc9f5bd52678b9f580a03843b87baaf16bf5040704dfad5c39a506eb232835b7eb9088883cc310fddd776e92ded7d2834db493737bd029e5c7e09800dde1e4a8", 0xaf}, {&(0x7f0000f3c000-0xb8)="977cdc37fb542b3faf84dc9425a10514059a8d3cc07d35adf5bc7b1dd3be923b38b762255714911006e35ab216fcc81397e3523681a1b978179b17264c8e1be82c033b6aed852bb2a90800164beb51b6ddacf67491707f8b0f24635557518f0f30dc8b157d2da85cbd9d8b34d66b69342c42ac0ea96e722ac426b7ced9123b8f09ad1de184733dd7921eb1e64ad09db97bb0c9dd4ad06f36fe1ae1380207e7f06e4d42493919438000aa83cbd224c3771fac3815bfc010f9", 0xb8}], 0x3, &(0x7f00009e7000)=[@assoc={0x18, 0x117, 0x4, 0x800}, @op={0x18, 0x117, 0x3, 0x0}, @iv={0x50, 0x117, 0x2, 0x3b, "96c667b2eacdaa15338c445249f3d0f17dc8206f5d250942074f1dcaae2ce35b2a454529fb2b0bcd60119836d9532b5823d3113a53b0d193c87fff"}, @op={0x18, 0x117, 0x3, 0x0}, @assoc={0x18, 0x117, 0x4, 0x6}], 0xb0, 0x20000000}, 0x0) mmap(&(0x7f0000f3c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f3c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f3d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f3e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f3e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f3e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000f3e000-0x38)={&(0x7f0000110000)=@rc={0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0}, 0x9, &(0x7f00002ca000)=[{&(0x7f0000998000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f0000814000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xc9}, {&(0x7f000066e000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xa5}], 0x3, &(0x7f000082e000+0x902)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xcf, 0x7ff}, 0x10000) mmap(&(0x7f0000f3b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f3c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000b5e000)={0x26, "6165616400000000000000000000", 0x2, 0x9, "67636d28646573335f6564652d61736d290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) sendmsg$alg(r1, &(0x7f0000f3d000-0x38)={0x0, 0x0, &(0x7f0000d49000)=[{&(0x7f0000f3c000)="c12254a486691dc938ef36dfe44fc5671a09845a68cdd6da5da7a657409f5ae61d3eeeabd54518a3f89e14a5346efb63b7c7011049658ba6a97d68f036b8f0e9ba7e673250072bc08205191eae7b54ade7d6ded7c8b2bfa07f0b478978ba233011dda51778979044", 0x68}, {&(0x7f0000db2000-0x7d)="eb313f8758698184bf59f4758ff62c332f6aa9e755f315ad369de48b51588d9cfa60b01e4a69c69630a597ad7314b0c9a3d521cc4a4463d92e43960fa9cb44c45fe6b9d53830a87dc3a3888d05c791853f04c1d02bd8ba084634acaf3ee6bfbbb28f6a33f0d1bf6ef1193a09d64aac429fc7c6cf8bb76b9482b1c8a85b", 0x7d}], 0x2, 0x0, 0x0, 0x4000000}, 0x20008004) bind$alg(r0, &(0x7f0000f3c000-0x58)={0x26, "736b636970686572000000000000", 0x0, 0x0, "63686163686132300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) r3 = accept4(r1, &(0x7f000055c000)=@ipx={0x0, 0x0, 0x0, "000000000000", 0x0, 0x0}, &(0x7f0000e56000-0x4)=0x10, 0x10000080000) mmap(&(0x7f0000f3d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f3e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000f3f000-0x8)={0x0, 0x7f}, &(0x7f0000813000)=0x8) mmap(&(0x7f0000f3e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f3e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000f3f000-0xc)={r4, 0x9, 0x40030}, &(0x7f00009fd000-0x4)=0xc) mmap(&(0x7f0000000000/0xffa000)=nil, 0xffa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) close(r5) mmap(&(0x7f0000000000/0xf72000)=nil, 0xf72000, 0x3, 0x32, 0xffffffffffffffff, 0x0)