INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.20' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program syzkaller login: [ 30.032529] ================================================================== [ 30.039936] BUG: KMSAN: uninit-value in aes_encrypt+0x4d34/0x5990 [ 30.046148] CPU: 0 PID: 3570 Comm: syzkaller681771 Not tainted 4.16.0+ #82 [ 30.053136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.062466] Call Trace: [ 30.065044] dump_stack+0x185/0x1d0 [ 30.068653] ? aes_encrypt+0x4d34/0x5990 [ 30.072699] kmsan_report+0x142/0x240 [ 30.076480] __msan_warning_32+0x6c/0xb0 executing program executing program executing program executing program executing program executing program executing program [ 30.080525] aes_encrypt+0x4d34/0x5990 [ 30.084393] ? __crypto_xor+0x15e5/0x16b0 [ 30.088535] ? crypto_aes_set_key+0x180/0x180 [ 30.093031] crypto_cbcmac_digest_update+0x393/0x530 [ 30.098139] ? crypto_aes_set_key+0x180/0x180 [ 30.102641] ? crypto_cbcmac_digest_init+0x140/0x140 [ 30.107745] shash_async_update+0x290/0x360 [ 30.112899] ? shash_async_init+0x270/0x270 [ 30.117209] gcm_hash+0x184f/0x24a0 [ 30.120832] crypto_gcm_encrypt+0xa13/0xaf0 [ 30.125147] ? crypto_gcm_setauthsize+0xc0/0xc0 executing program executing program [ 30.130319] aead_recvmsg+0x25b5/0x2960 [ 30.134300] sock_recvmsg+0x1d0/0x230 [ 30.138110] ? aead_sendmsg+0x1b0/0x1b0 [ 30.142084] ___sys_recvmsg+0x3fb/0x810 [ 30.146055] ? __fget_light+0x56/0x710 [ 30.149934] ? __fdget+0x4e/0x60 [ 30.153293] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 30.158631] ? __fget_light+0x6b9/0x710 [ 30.162584] SYSC_recvmsg+0x298/0x3c0 [ 30.166363] SyS_recvmsg+0x54/0x80 [ 30.169890] do_syscall_64+0x309/0x430 [ 30.173767] ? ___sys_recvmsg+0x810/0x810 [ 30.177898] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 30.183063] RIP: 0033:0x445789 [ 30.186231] RSP: 002b:00007f58ddf79da8 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 30.193922] RAX: ffffffffffffffda RBX: 00000000006dac24 RCX: 0000000000445789 [ 30.201179] RDX: 0000000000000000 RSI: 0000000020001440 RDI: 000000000000000c [ 30.208426] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 30.215672] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dac20 [ 30.222960] R13: b7db545ced0cb6b3 R14: e581e305b075070a R15: 0000000000000006 [ 30.230210] [ 30.231809] Uninit was stored to memory at: [ 30.236113] kmsan_internal_chain_origin+0x12b/0x210 [ 30.241193] __msan_chain_origin+0x69/0xc0 [ 30.245405] __crypto_xor+0x95f/0x16b0 [ 30.249270] crypto_cbcmac_digest_update+0x287/0x530 [ 30.254347] shash_async_update+0x290/0x360 [ 30.258643] gcm_hash+0x8b5/0x24a0 [ 30.262162] crypto_gcm_encrypt+0xa13/0xaf0 [ 30.266463] aead_recvmsg+0x25b5/0x2960 [ 30.270414] sock_recvmsg+0x1d0/0x230 [ 30.274194] ___sys_recvmsg+0x3fb/0x810 [ 30.278144] SYSC_recvmsg+0x298/0x3c0 [ 30.281918] SyS_recvmsg+0x54/0x80 [ 30.285447] do_syscall_64+0x309/0x430 [ 30.289335] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 30.294508] Uninit was stored to memory at: [ 30.298817] kmsan_internal_chain_origin+0x12b/0x210 [ 30.303895] __msan_chain_origin+0x69/0xc0 [ 30.308106] __crypto_xor+0x95f/0x16b0 [ 30.311968] ctr_crypt+0x432/0x4f0 [ 30.315484] simd_skcipher_encrypt+0x221/0x320 [ 30.320050] crypto_gcm_encrypt+0x53e/0xaf0 [ 30.324368] aead_recvmsg+0x25b5/0x2960 [ 30.328337] sock_recvmsg+0x1d0/0x230 [ 30.332134] ___sys_recvmsg+0x3fb/0x810 [ 30.336110] SYSC_recvmsg+0x298/0x3c0 [ 30.339902] SyS_recvmsg+0x54/0x80 [ 30.343433] do_syscall_64+0x309/0x430 [ 30.347318] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 30.352498] Local variable description: ----keystream.i@ctr_crypt [ 30.358714] Variable was created at: [ 30.362430] ctr_crypt+0x4a/0x4f0 [ 30.365874] simd_skcipher_encrypt+0x221/0x320 [ 30.370438] ================================================================== [ 30.378037] Disabling lock debugging due to kernel taint [ 30.383475] Kernel panic - not syncing: panic_on_warn set ... [ 30.383475] [ 30.391793] CPU: 0 PID: 3570 Comm: syzkaller681771 Tainted: G B 4.16.0+ #82 [ 30.400103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.411280] Call Trace: [ 30.413872] dump_stack+0x185/0x1d0 [ 30.417500] panic+0x39d/0x940 [ 30.420711] ? aes_encrypt+0x4d34/0x5990 [ 30.427073] kmsan_report+0x238/0x240 [ 30.430883] __msan_warning_32+0x6c/0xb0 [ 30.435051] aes_encrypt+0x4d34/0x5990 [ 30.438939] ? __crypto_xor+0x15e5/0x16b0 [ 30.443091] ? crypto_aes_set_key+0x180/0x180 [ 30.447586] crypto_cbcmac_digest_update+0x393/0x530 [ 30.453406] ? crypto_aes_set_key+0x180/0x180 [ 30.457903] ? crypto_cbcmac_digest_init+0x140/0x140 [ 30.463000] shash_async_update+0x290/0x360 [ 30.467318] ? shash_async_init+0x270/0x270 [ 30.471640] gcm_hash+0x184f/0x24a0 [ 30.475269] crypto_gcm_encrypt+0xa13/0xaf0 [ 30.479589] ? crypto_gcm_setauthsize+0xc0/0xc0 [ 30.484252] aead_recvmsg+0x25b5/0x2960 [ 30.488239] sock_recvmsg+0x1d0/0x230 [ 30.492035] ? aead_sendmsg+0x1b0/0x1b0 [ 30.496006] ___sys_recvmsg+0x3fb/0x810 [ 30.499983] ? __fget_light+0x56/0x710 [ 30.503864] ? __fdget+0x4e/0x60 [ 30.507224] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 30.512581] ? __fget_light+0x6b9/0x710 [ 30.517082] SYSC_recvmsg+0x298/0x3c0 [ 30.520883] SyS_recvmsg+0x54/0x80 [ 30.524417] do_syscall_64+0x309/0x430 [ 30.528302] ? ___sys_recvmsg+0x810/0x810 [ 30.532447] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 30.537628] RIP: 0033:0x445789 [ 30.540807] RSP: 002b:00007f58ddf79da8 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 30.548507] RAX: ffffffffffffffda RBX: 00000000006dac24 RCX: 0000000000445789 [ 30.555772] RDX: 0000000000000000 RSI: 0000000020001440 RDI: 000000000000000c [ 30.563035] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 30.570294] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dac20 [ 30.577558] R13: b7db545ced0cb6b3 R14: e581e305b075070a R15: 0000000000000006 [ 30.585358] Dumping ftrace buffer: [ 30.588881] (ftrace buffer empty) [ 30.592564] Kernel Offset: disabled [ 30.596166] Rebooting in 86400 seconds..