INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.42' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 35.278687] ================================================================== [ 35.286108] BUG: KMSAN: uninit-value in crypto_aes_expand_key+0x6d1/0x1dc0 [ 35.293114] CPU: 0 PID: 3586 Comm: syzkaller839455 Not tainted 4.16.0+ #83 [ 35.300111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 35.309453] Call Trace: [ 35.312041] dump_stack+0x185/0x1d0 [ 35.315663] ? crypto_aes_expand_key+0x6d1/0x1dc0 [ 35.320491] kmsan_report+0x142/0x240 [ 35.324274] __msan_warning_32+0x6c/0xb0 [ 35.328317] crypto_aes_expand_key+0x6d1/0x1dc0 [ 35.332973] crypto_aes_set_key+0x9d/0x180 [ 35.337197] ? crypto_aes_expand_key+0x1dc0/0x1dc0 [ 35.342117] setkey+0x50f/0x5a0 [ 35.345395] crypto_xcbc_digest_setkey+0x4b7/0x570 [ 35.350324] ? crypto_init_cipher_ops+0x2c0/0x2c0 [ 35.355161] ? crypto_aes_decrypt_x86+0xa0/0xa0 [ 35.359822] ? crypto_aes_decrypt_x86+0xa0/0xa0 [ 35.364477] ? crypto_aes_decrypt_x86+0xa0/0xa0 [ 35.369147] ? crypto_init_cipher_ops+0x2c0/0x2c0 [ 35.374071] ? shash_async_setkey+0x2c8/0x4c0 [ 35.378648] ? crypto_xcbc_digest_final+0x530/0x530 [ 35.383665] shash_async_setkey+0x337/0x4c0 [ 35.387996] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 35.393349] ? trace_kmalloc+0xb6/0x2b0 [ 35.397330] ? shash_async_digest+0x1b0/0x1b0 [ 35.401818] crypto_ahash_setkey+0x31a/0x470 [ 35.406238] hash_setkey+0x8b/0xa0 [ 35.409760] alg_setsockopt+0x6c5/0x740 [ 35.413715] ? hash_release+0x50/0x50 [ 35.417500] ? alg_accept+0xd0/0xd0 [ 35.421133] SYSC_setsockopt+0x4b8/0x570 [ 35.425195] SyS_setsockopt+0x76/0xa0 [ 35.428979] do_syscall_64+0x309/0x430 [ 35.432871] ? SYSC_recv+0xe0/0xe0 [ 35.436393] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 35.441561] RIP: 0033:0x43fdf9 [ 35.444817] RSP: 002b:00007ffe1ec2d2f8 EFLAGS: 00000217 ORIG_RAX: 0000000000000036 [ 35.452509] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fdf9 [ 35.459761] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000003 [ 35.467017] RBP: 00000000006ca018 R08: 0000000000000010 R09: 00000000004002c8 [ 35.474281] R10: 0000000020001f3a R11: 0000000000000217 R12: 0000000000401720 [ 35.481534] R13: 00000000004017b0 R14: 0000000000000000 R15: 0000000000000000 [ 35.488788] [ 35.490394] Local variable description: ----vla@crypto_xcbc_digest_setkey [ 35.497293] Variable was created at: [ 35.500999] crypto_xcbc_digest_setkey+0x12e/0x570 [ 35.505917] shash_async_setkey+0x337/0x4c0 [ 35.510215] ================================================================== [ 35.517548] Disabling lock debugging due to kernel taint [ 35.522989] Kernel panic - not syncing: panic_on_warn set ... [ 35.522989] [ 35.530428] CPU: 0 PID: 3586 Comm: syzkaller839455 Tainted: G B 4.16.0+ #83 [ 35.538735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 35.548086] Call Trace: [ 35.550661] dump_stack+0x185/0x1d0 [ 35.554273] panic+0x39d/0x940 [ 35.557480] ? crypto_aes_expand_key+0x6d1/0x1dc0 [ 35.562312] kmsan_report+0x238/0x240 [ 35.566129] __msan_warning_32+0x6c/0xb0 [ 35.570187] crypto_aes_expand_key+0x6d1/0x1dc0 [ 35.574849] crypto_aes_set_key+0x9d/0x180 [ 35.579083] ? crypto_aes_expand_key+0x1dc0/0x1dc0 [ 35.584020] setkey+0x50f/0x5a0 [ 35.587295] crypto_xcbc_digest_setkey+0x4b7/0x570 [ 35.592206] ? crypto_init_cipher_ops+0x2c0/0x2c0 [ 35.597043] ? crypto_aes_decrypt_x86+0xa0/0xa0 [ 35.601705] ? crypto_aes_decrypt_x86+0xa0/0xa0 [ 35.606364] ? crypto_aes_decrypt_x86+0xa0/0xa0 [ 35.611041] ? crypto_init_cipher_ops+0x2c0/0x2c0 [ 35.615934] ? shash_async_setkey+0x2c8/0x4c0 [ 35.620429] ? crypto_xcbc_digest_final+0x530/0x530 [ 35.625444] shash_async_setkey+0x337/0x4c0 [ 35.629757] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 35.635110] ? trace_kmalloc+0xb6/0x2b0 [ 35.639084] ? shash_async_digest+0x1b0/0x1b0 [ 35.643569] crypto_ahash_setkey+0x31a/0x470 [ 35.647980] hash_setkey+0x8b/0xa0 [ 35.651591] alg_setsockopt+0x6c5/0x740 [ 35.655552] ? hash_release+0x50/0x50 [ 35.659336] ? alg_accept+0xd0/0xd0 [ 35.662958] SYSC_setsockopt+0x4b8/0x570 [ 35.667021] SyS_setsockopt+0x76/0xa0 [ 35.670815] do_syscall_64+0x309/0x430 [ 35.674701] ? SYSC_recv+0xe0/0xe0 [ 35.678230] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 35.683403] RIP: 0033:0x43fdf9 [ 35.686572] RSP: 002b:00007ffe1ec2d2f8 EFLAGS: 00000217 ORIG_RAX: 0000000000000036 [ 35.694266] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fdf9 [ 35.701521] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000003 [ 35.708774] RBP: 00000000006ca018 R08: 0000000000000010 R09: 00000000004002c8 [ 35.716031] R10: 0000000020001f3a R11: 0000000000000217 R12: 0000000000401720 [ 35.723318] R13: 00000000004017b0 R14: 0000000000000000 R15: 0000000000000000 [ 35.731389] Dumping ftrace buffer: [ 35.734918] (ftrace buffer empty) [ 35.738605] Kernel Offset: disabled [ 35.742209] Rebooting in 86400 seconds..