INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.59' (ECDSA) to the list of known hosts. 2018/04/10 23:25:07 fuzzer started 2018/04/10 23:25:07 dialing manager at 10.128.0.26:40599 2018/04/10 23:25:13 kcov=true, comps=false 2018/04/10 23:25:16 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0xa, 0x2, 0x0) r1 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) connect$inet6(r0, &(0x7f0000d3cfe4)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x3}, 0x1c) fallocate(r1, 0x0, 0xffff, 0x1f) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendfile(r0, r1, &(0x7f00005faff8), 0xfffb) 2018/04/10 23:25:16 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000b24fb0)=[{&(0x7f0000830000)=""/4096, 0x1000}], 0x1, 0x0) 2018/04/10 23:25:16 executing program 7: r0 = socket$inet(0x2, 0x4000000805, 0x0) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) 2018/04/10 23:25:16 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x440000000000127c, &(0x7f000002cfff)) 2018/04/10 23:25:16 executing program 1: futex(&(0x7f0000000040)=0x4, 0x0, 0x4, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/04/10 23:25:16 executing program 4: getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000440)={0x0, @in6={{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}, 0x5}, &(0x7f0000000280)=0x98) sendto$inet6(0xffffffffffffffff, &(0x7f00000011c0)="b432656f9a77946eaa0cf603c475f7a8ad97f32c1b83670e9c9ed0c8fb7a67711f865dd581dcd7cacb62891c9195cfcaa11c99bbb3226f7c8020024665fb61b14344e459cf2dd89ae98887d472a6acffccc538e37b8a71a6385408baa28cc1782f5bc9a79c401a7e8f7cbcc0298b0f2fd461ee23c36f6ebd5ef7753ac778c12ed87a4f1a3ba0d4fc07ef0e12cff6dde2ec943b31fb12d16457ab129f26891897bf3f60136515892308f54ea9987e4047731968604daee4871dbcbac22ad7e2e8ab60cc48db0847236858d9e2591455ac0d84f240fa03f531aa08b2c75885d291fd", 0xe1, 0x0, &(0x7f0000000400)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x2, 0x0) write$sndseq(r0, &(0x7f00000003c0)=[{}], 0xffffff1a) 2018/04/10 23:25:16 executing program 5: clone(0x0, &(0x7f00000006c0), &(0x7f0000c53000), &(0x7f0000f8b000), &(0x7f0000000280)) 2018/04/10 23:25:16 executing program 6: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={"766c616e300000000f00", 0x400}) syzkaller login: [ 43.168251] ip (3740) used greatest stack depth: 54408 bytes left [ 44.118902] ip (3827) used greatest stack depth: 54200 bytes left [ 45.216325] ip (3929) used greatest stack depth: 54160 bytes left [ 46.453335] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.640935] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.728081] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.740433] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.748598] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.940823] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.972991] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.997208] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 55.478959] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.620023] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.686634] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.733262] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.764430] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.777746] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.851493] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.902737] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 56.260411] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.268281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.288604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.388755] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.395094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.409577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.436656] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.445243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.479111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.496547] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.502810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.520384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.537389] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.551236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.565196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.599473] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.608218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.629893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.712932] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.719200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.733868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.769847] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.776143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.792361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/10 23:25:33 executing program 4: 2018/04/10 23:25:33 executing program 2: 2018/04/10 23:25:33 executing program 6: 2018/04/10 23:25:33 executing program 2: 2018/04/10 23:25:33 executing program 4: 2018/04/10 23:25:34 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0xa, 0x2, 0x0) r1 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) connect$inet6(r0, &(0x7f0000d3cfe4)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x3}, 0x1c) fallocate(r1, 0x0, 0xffff, 0x1f) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendfile(r0, r1, &(0x7f00005faff8), 0xfffb) 2018/04/10 23:25:34 executing program 3: 2018/04/10 23:25:34 executing program 6: 2018/04/10 23:25:34 executing program 2: 2018/04/10 23:25:34 executing program 4: 2018/04/10 23:25:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f000001f000)=@ipv6_newroute={0x28, 0x18, 0x781a241f, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_MULTIPATH={0xc, 0x9, [{0x8}]}]}, 0x28}, 0x1}, 0x0) 2018/04/10 23:25:34 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) write(r0, &(0x7f0000000400)="7fc44a8f683994ec8ca24197a5c271c2c2fe2ab11cb81171c1f7516bff56f7b30916181da38e6acde2ebe5fad3e8db0be1789b16c717cc55b069b67237cbde261698fcd2b9846324675dffd9931356a9543effde0104e5488fd9a0229a7d9eaa23e4fb8368491724969d4ce36c6c40a66ead14a0ab7f05384dd343d79812c419680d50abe4b440c25dec768127ac50951ffbe96a8ae49ff4cb7429179055d0ee2d296310e2fbe56a2b2688b9cfee3a6461e293a112ae38636eb514433fb8e88ed32d6ac09670c07eddb150069020581d8794435c150787470637bb79f6b96c1139ed82e06c3993d8d143d6353491283b3cbe5137db21e173350362321a9d", 0xfe) 2018/04/10 23:25:34 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xfffffffffffffd90, 0x20020003, &(0x7f0000385ff0)={0x2, 0x20000000004e21, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f0000769f0f)=""/241, 0xfffffffffffffdd4, 0x0, &(0x7f0000497ff0)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2018/04/10 23:25:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/packet\x00') readv(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/186, 0xba}], 0x1) 2018/04/10 23:25:34 executing program 5: 2018/04/10 23:25:34 executing program 4: 2018/04/10 23:25:34 executing program 6: 2018/04/10 23:25:34 executing program 1: 2018/04/10 23:25:35 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr, @in6=@mcast2={0xff, 0x2, [], 0x1}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}, 0x1}, 0x0) 2018/04/10 23:25:35 executing program 0: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x200000000000a2) 2018/04/10 23:25:35 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x4000000000004c02, &(0x7f0000000000)) 2018/04/10 23:25:35 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000f3eff0)="01010000000ef40000000300409d9254", 0x10) r1 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffd24, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000005c0)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=@report={0x4c, 0x20, 0x0, 0x0, 0x0, {0x0, {@in=@dev={0xac, 0x14, 0x14}, @in=@multicast2=0xe0000002}}}, 0x4c}, 0x1}, 0x0) 2018/04/10 23:25:35 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x200000000000a2) r1 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000080), 0x102000004) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='io\x00') dup3(r2, r0, 0x0) 2018/04/10 23:25:35 executing program 6: syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="cd38ffe40f970180c200000086dd60e3060000183aff00000000000000000000000000000000000000018700907800000000fe8000000000000000000000000000ff000000000000000000000000"], 0x0) 2018/04/10 23:25:35 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xfffffffffffffd90, 0x20020003, &(0x7f0000385ff0)={0x2, 0x20000000004e21, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f0000769f0f)=""/241, 0xfffffffffffffdd4, 0x0, &(0x7f0000497ff0)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2018/04/10 23:25:35 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f00009f1000)='G', 0x1, 0x0, &(0x7f0000108fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x0, 0x20}, 0xc) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000b40)="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", 0x121}], 0x1) 2018/04/10 23:25:35 executing program 0: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1040000000000004, 0x400000aa}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000080)) [ 59.596462] ================================================================== [ 59.603884] BUG: KMSAN: uninit-value in vmac_setkey+0x337/0x940 [ 59.609944] CPU: 0 PID: 5103 Comm: syz-executor1 Not tainted 4.16.0+ #83 [ 59.616785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.626134] Call Trace: [ 59.628728] dump_stack+0x185/0x1d0 [ 59.632360] ? vmac_setkey+0x337/0x940 [ 59.636252] kmsan_report+0x142/0x240 [ 59.640057] ? aes_set_key+0x260/0x260 [ 59.643946] __msan_warning_32+0x6c/0xb0 [ 59.648004] ? aes_set_key+0x260/0x260 [ 59.651892] vmac_setkey+0x337/0x940 [ 59.655614] ? vmac_final+0x3f80/0x3f80 [ 59.659592] shash_async_setkey+0x337/0x4c0 [ 59.663913] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 59.669274] ? trace_kmalloc+0xb6/0x2b0 [ 59.673246] ? shash_async_digest+0x1b0/0x1b0 [ 59.677745] crypto_ahash_setkey+0x31a/0x470 [ 59.682158] hash_setkey+0x8b/0xa0 [ 59.685701] alg_setsockopt+0x6c5/0x740 [ 59.689672] ? hash_release+0x50/0x50 [ 59.693466] ? alg_accept+0xd0/0xd0 2018/04/10 23:25:35 executing program 2: 2018/04/10 23:25:35 executing program 6: 2018/04/10 23:25:35 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f00009f1000)='G', 0x1, 0x0, &(0x7f0000108fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x0, 0x20}, 0xc) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000b40)="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", 0x121}], 0x1) 2018/04/10 23:25:35 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0x3}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40bc5311, &(0x7f0000000180)) 2018/04/10 23:25:35 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1040000000000004, 0x400000aa}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x6f2000, 0x2, 0x1, &(0x7f0000000080)) 2018/04/10 23:25:35 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/ip6_tables_matches\x00') close(r0) [ 59.697092] SYSC_setsockopt+0x4b8/0x570 [ 59.701156] SyS_setsockopt+0x76/0xa0 [ 59.704950] do_syscall_64+0x309/0x430 [ 59.708837] ? SYSC_recv+0xe0/0xe0 [ 59.712381] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 59.717564] RIP: 0033:0x455259 [ 59.720745] RSP: 002b:00007f9c50b59c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 59.728451] RAX: ffffffffffffffda RBX: 00007f9c50b5a6d4 RCX: 0000000000455259 [ 59.735717] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000013 [ 59.742985] RBP: 000000000072bea0 R08: 0000000000000010 R09: 0000000000000000 [ 59.750249] R10: 0000000020f3eff0 R11: 0000000000000246 R12: 00000000ffffffff [ 59.757504] R13: 0000000000000510 R14: 00000000006faa20 R15: 0000000000000000 [ 59.764762] [ 59.766368] Local variable description: ----out.i@vmac_setkey [ 59.772226] Variable was created at: [ 59.775927] vmac_setkey+0x93/0x940 [ 59.779532] shash_async_setkey+0x337/0x4c0 [ 59.783826] ================================================================== [ 59.791159] Disabling lock debugging due to kernel taint [ 59.796589] Kernel panic - not syncing: panic_on_warn set ... [ 59.796589] [ 59.803933] CPU: 0 PID: 5103 Comm: syz-executor1 Tainted: G B 4.16.0+ #83 [ 59.812056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.821389] Call Trace: [ 59.823959] dump_stack+0x185/0x1d0 [ 59.827569] panic+0x39d/0x940 [ 59.830767] ? vmac_setkey+0x337/0x940 [ 59.834635] kmsan_report+0x238/0x240 [ 59.838423] ? aes_set_key+0x260/0x260 [ 59.842291] __msan_warning_32+0x6c/0xb0 [ 59.846331] ? aes_set_key+0x260/0x260 [ 59.850202] vmac_setkey+0x337/0x940 [ 59.853899] ? vmac_final+0x3f80/0x3f80 [ 59.857851] shash_async_setkey+0x337/0x4c0 [ 59.862154] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 59.867502] ? trace_kmalloc+0xb6/0x2b0 [ 59.871458] ? shash_async_digest+0x1b0/0x1b0 [ 59.875934] crypto_ahash_setkey+0x31a/0x470 [ 59.880331] hash_setkey+0x8b/0xa0 [ 59.883857] alg_setsockopt+0x6c5/0x740 [ 59.887816] ? hash_release+0x50/0x50 [ 59.891608] ? alg_accept+0xd0/0xd0 [ 59.895217] SYSC_setsockopt+0x4b8/0x570 [ 59.899262] SyS_setsockopt+0x76/0xa0 [ 59.903050] do_syscall_64+0x309/0x430 [ 59.906922] ? SYSC_recv+0xe0/0xe0 [ 59.910454] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 59.915624] RIP: 0033:0x455259 [ 59.918793] RSP: 002b:00007f9c50b59c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 59.926481] RAX: ffffffffffffffda RBX: 00007f9c50b5a6d4 RCX: 0000000000455259 [ 59.933730] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000013 [ 59.940976] RBP: 000000000072bea0 R08: 0000000000000010 R09: 0000000000000000 [ 59.948224] R10: 0000000020f3eff0 R11: 0000000000000246 R12: 00000000ffffffff [ 59.955567] R13: 0000000000000510 R14: 00000000006faa20 R15: 0000000000000000 [ 59.963252] Dumping ftrace buffer: [ 59.966767] (ftrace buffer empty) [ 59.970448] Kernel Offset: disabled [ 59.974046] Rebooting in 86400 seconds..