INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.6' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 30.156970] ================================================================== [ 30.164379] BUG: KMSAN: uninit-value in __twofish_setkey+0x269/0xa150 [ 30.170937] CPU: 0 PID: 3580 Comm: syzkaller999392 Not tainted 4.16.0+ #84 [ 30.177922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.187252] Call Trace: [ 30.189833] dump_stack+0x185/0x1d0 [ 30.193435] ? __twofish_setkey+0x269/0xa150 [ 30.197822] kmsan_report+0x142/0x240 [ 30.201601] __msan_warning_32+0x6c/0xb0 [ 30.205637] __twofish_setkey+0x269/0xa150 [ 30.209858] twofish_setkey+0x9a/0xb0 [ 30.213633] ? __twofish_setkey+0xa150/0xa150 [ 30.218107] setkey+0x50f/0x5a0 [ 30.221370] crypto_xcbc_digest_setkey+0x4b7/0x570 [ 30.226275] ? crypto_init_cipher_ops+0x2c0/0x2c0 [ 30.231091] ? twofish_dec_blk+0x7c0/0x7c0 [ 30.235300] ? twofish_dec_blk+0x7c0/0x7c0 [ 30.239508] ? twofish_dec_blk+0x7c0/0x7c0 [ 30.243718] ? crypto_init_cipher_ops+0x2c0/0x2c0 [ 30.248533] ? shash_async_setkey+0x2c8/0x4c0 [ 30.253007] ? crypto_xcbc_digest_final+0x530/0x530 [ 30.258010] shash_async_setkey+0x337/0x4c0 [ 30.262315] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 30.267653] ? trace_kmalloc+0xb6/0x2b0 [ 30.271603] ? shash_async_digest+0x1b0/0x1b0 [ 30.276077] crypto_ahash_setkey+0x31a/0x470 [ 30.280466] hash_setkey+0x8b/0xa0 [ 30.283981] alg_setsockopt+0x6c5/0x740 [ 30.287932] ? hash_release+0x50/0x50 [ 30.291708] ? alg_accept+0xd0/0xd0 [ 30.295314] SYSC_setsockopt+0x4b8/0x570 [ 30.299353] SyS_setsockopt+0x76/0xa0 [ 30.303131] do_syscall_64+0x309/0x430 [ 30.306995] ? SYSC_recv+0xe0/0xe0 [ 30.310520] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 30.315685] RIP: 0033:0x43fdb9 [ 30.318848] RSP: 002b:00007ffcbb8a1fb8 EFLAGS: 00000217 ORIG_RAX: 0000000000000036 [ 30.326532] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fdb9 [ 30.333777] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000003 [ 30.341030] RBP: 00000000006ca018 R08: 0000000000000018 R09: 00000000004002c8 [ 30.348281] R10: 0000000020000400 R11: 0000000000000217 R12: 00000000004016e0 [ 30.355528] R13: 0000000000401770 R14: 0000000000000000 R15: 0000000000000000 [ 30.362773] [ 30.364376] Local variable description: ----vla@crypto_xcbc_digest_setkey [ 30.371284] Variable was created at: [ 30.374980] crypto_xcbc_digest_setkey+0x12e/0x570 [ 30.379893] shash_async_setkey+0x337/0x4c0 [ 30.384185] ================================================================== [ 30.391516] Disabling lock debugging due to kernel taint [ 30.396940] Kernel panic - not syncing: panic_on_warn set ... [ 30.396940] [ 30.404284] CPU: 0 PID: 3580 Comm: syzkaller999392 Tainted: G B 4.16.0+ #84 [ 30.412569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.421900] Call Trace: [ 30.424475] dump_stack+0x185/0x1d0 [ 30.428081] panic+0x39d/0x940 [ 30.431262] ? __twofish_setkey+0x269/0xa150 [ 30.435647] kmsan_report+0x238/0x240 [ 30.439425] __msan_warning_32+0x6c/0xb0 [ 30.443461] __twofish_setkey+0x269/0xa150 [ 30.447680] twofish_setkey+0x9a/0xb0 [ 30.451457] ? __twofish_setkey+0xa150/0xa150 [ 30.455926] setkey+0x50f/0x5a0 [ 30.459185] crypto_xcbc_digest_setkey+0x4b7/0x570 [ 30.464089] ? crypto_init_cipher_ops+0x2c0/0x2c0 [ 30.468907] ? twofish_dec_blk+0x7c0/0x7c0 [ 30.473117] ? twofish_dec_blk+0x7c0/0x7c0 [ 30.477325] ? twofish_dec_blk+0x7c0/0x7c0 [ 30.481536] ? crypto_init_cipher_ops+0x2c0/0x2c0 [ 30.486355] ? shash_async_setkey+0x2c8/0x4c0 [ 30.490827] ? crypto_xcbc_digest_final+0x530/0x530 [ 30.495818] shash_async_setkey+0x337/0x4c0 [ 30.500120] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 30.505462] ? trace_kmalloc+0xb6/0x2b0 [ 30.509418] ? shash_async_digest+0x1b0/0x1b0 [ 30.513892] crypto_ahash_setkey+0x31a/0x470 [ 30.518281] hash_setkey+0x8b/0xa0 [ 30.521800] alg_setsockopt+0x6c5/0x740 [ 30.525750] ? hash_release+0x50/0x50 [ 30.529528] ? alg_accept+0xd0/0xd0 [ 30.533136] SYSC_setsockopt+0x4b8/0x570 [ 30.537176] SyS_setsockopt+0x76/0xa0 [ 30.540953] do_syscall_64+0x309/0x430 [ 30.544817] ? SYSC_recv+0xe0/0xe0 [ 30.548354] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 30.553520] RIP: 0033:0x43fdb9 [ 30.556684] RSP: 002b:00007ffcbb8a1fb8 EFLAGS: 00000217 ORIG_RAX: 0000000000000036 [ 30.564367] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fdb9 [ 30.571611] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000003 [ 30.578856] RBP: 00000000006ca018 R08: 0000000000000018 R09: 00000000004002c8 [ 30.586104] R10: 0000000020000400 R11: 0000000000000217 R12: 00000000004016e0 [ 30.593350] R13: 0000000000401770 R14: 0000000000000000 R15: 0000000000000000 [ 30.601086] Dumping ftrace buffer: [ 30.604607] (ftrace buffer empty) [ 30.608292] Kernel Offset: disabled [ 30.611895] Rebooting in 86400 seconds..