[ OK ] Started OpenBSD Secure Shell server. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.222' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 150.540267][ T8476] ===================================================== [ 150.547262][ T8476] BUG: KMSAN: uninit-value in tgr192_pass+0x1a25/0x1ee0 [ 150.554197][ T8476] CPU: 1 PID: 8476 Comm: syz-executor485 Not tainted 5.8.0-rc5-syzkaller #0 [ 150.563455][ T8476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 150.573504][ T8476] Call Trace: [ 150.576804][ T8476] dump_stack+0x1df/0x240 [ 150.581138][ T8476] kmsan_report+0xf7/0x1e0 [ 150.585556][ T8476] __msan_warning+0x58/0xa0 [ 150.590066][ T8476] tgr192_pass+0x1a25/0x1ee0 [ 150.594673][ T8476] ? kmsan_get_metadata+0x4f/0x180 [ 150.599776][ T8476] ? kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 150.605962][ T8476] tgr192_transform+0x248/0x1080 [ 150.610894][ T8476] ? is_module_text_address+0x4d/0x2a0 [ 150.616364][ T8476] ? __kernel_text_address+0x171/0x2d0 [ 150.621836][ T8476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 150.627989][ T8476] tgr192_update+0x663/0xb00 [ 150.632593][ T8476] ? tgr192_init+0x150/0x150 [ 150.637195][ T8476] crypto_shash_update+0x4e9/0x550 [ 150.642402][ T8476] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 150.648609][ T8476] ? crypto_hash_walk_first+0x1fd/0x360 [ 150.654152][ T8476] ? kmsan_get_metadata+0x4f/0x180 [ 150.659271][ T8476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 150.665102][ T8476] shash_async_update+0x113/0x1d0 [ 150.671084][ T8476] ? shash_async_init+0x1e0/0x1e0 [ 150.677065][ T8476] hash_sendpage+0x8ef/0xdf0 [ 150.681653][ T8476] ? hash_recvmsg+0xd30/0xd30 [ 150.686336][ T8476] sock_sendpage+0x1e1/0x2c0 [ 150.690952][ T8476] pipe_to_sendpage+0x38c/0x4c0 [ 150.695800][ T8476] ? sock_fasync+0x250/0x250 [ 150.700395][ T8476] __splice_from_pipe+0x565/0xf00 [ 150.705446][ T8476] ? generic_splice_sendpage+0x2d0/0x2d0 [ 150.711105][ T8476] generic_splice_sendpage+0x1d5/0x2d0 [ 150.716579][ T8476] ? iter_file_splice_write+0x1800/0x1800 [ 150.722293][ T8476] direct_splice_actor+0x1fd/0x580 [ 150.727420][ T8476] ? kmsan_get_metadata+0x4f/0x180 [ 150.732536][ T8476] splice_direct_to_actor+0x6b2/0xf50 [ 150.737894][ T8476] ? do_splice_direct+0x580/0x580 [ 150.743070][ T8476] do_splice_direct+0x342/0x580 [ 150.747940][ T8476] do_sendfile+0x101b/0x1d40 [ 150.752566][ T8476] __se_sys_sendfile64+0x2bb/0x360 [ 150.757678][ T8476] ? kmsan_get_metadata+0x4f/0x180 [ 150.762795][ T8476] __x64_sys_sendfile64+0x56/0x70 [ 150.767848][ T8476] do_syscall_64+0xb0/0x150 [ 150.772359][ T8476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 150.778236][ T8476] RIP: 0033:0x4403e9 [ 150.782107][ T8476] Code: Bad RIP value. [ 150.786166][ T8476] RSP: 002b:00007ffc2ab40ab8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 150.794583][ T8476] RAX: ffffffffffffffda RBX: 00007ffc2ab40ac0 RCX: 00000000004403e9 [ 150.803082][ T8476] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000005 [ 150.811056][ T8476] RBP: 00000000006ca018 R08: 65732f636f72702f R09: 65732f636f72702f [ 150.819017][ T8476] R10: 0000000000007ffe R11: 0000000000000246 R12: 0000000000401c50 [ 150.826998][ T8476] R13: 0000000000401ce0 R14: 0000000000000000 R15: 0000000000000000 [ 150.835229][ T8476] [ 150.837554][ T8476] Uninit was stored to memory at: [ 150.842589][ T8476] kmsan_internal_chain_origin+0xad/0x130 [ 150.848304][ T8476] kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 150.854276][ T8476] kmsan_memcpy_metadata+0xb/0x10 [ 150.859279][ T8476] __msan_memcpy+0x43/0x50 [ 150.863679][ T8476] tgr192_transform+0xc5/0x1080 [ 150.868518][ T8476] tgr192_update+0x663/0xb00 [ 150.873089][ T8476] crypto_shash_update+0x4e9/0x550 [ 150.878191][ T8476] shash_async_update+0x113/0x1d0 [ 150.883197][ T8476] hash_sendpage+0x8ef/0xdf0 [ 150.887788][ T8476] sock_sendpage+0x1e1/0x2c0 [ 150.892365][ T8476] pipe_to_sendpage+0x38c/0x4c0 [ 150.897197][ T8476] __splice_from_pipe+0x565/0xf00 [ 150.902224][ T8476] generic_splice_sendpage+0x1d5/0x2d0 [ 150.907680][ T8476] direct_splice_actor+0x1fd/0x580 [ 150.912774][ T8476] splice_direct_to_actor+0x6b2/0xf50 [ 150.918138][ T8476] do_splice_direct+0x342/0x580 [ 150.922978][ T8476] do_sendfile+0x101b/0x1d40 [ 150.927568][ T8476] __se_sys_sendfile64+0x2bb/0x360 [ 150.932694][ T8476] __x64_sys_sendfile64+0x56/0x70 [ 150.937711][ T8476] do_syscall_64+0xb0/0x150 [ 150.942210][ T8476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 150.948086][ T8476] [ 150.950394][ T8476] Uninit was created at: [ 150.954627][ T8476] kmsan_save_stack_with_flags+0x3c/0x90 [ 150.960240][ T8476] kmsan_alloc_page+0xb9/0x180 [ 150.965074][ T8476] __alloc_pages_nodemask+0x56a2/0x5dc0 [ 150.970633][ T8476] alloc_pages_current+0x672/0x990 [ 150.975733][ T8476] push_pipe+0x605/0xb70 [ 150.979993][ T8476] iov_iter_get_pages_alloc+0x18a9/0x21c0 [ 150.985719][ T8476] do_splice_to+0x4fc/0x14f0 [ 150.990482][ T8476] splice_direct_to_actor+0x45c/0xf50 [ 150.995842][ T8476] do_splice_direct+0x342/0x580 [ 151.000678][ T8476] do_sendfile+0x101b/0x1d40 [ 151.005272][ T8476] __se_sys_sendfile64+0x2bb/0x360 [ 151.010363][ T8476] __x64_sys_sendfile64+0x56/0x70 [ 151.015386][ T8476] do_syscall_64+0xb0/0x150 [ 151.019889][ T8476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 151.025755][ T8476] ===================================================== [ 151.032675][ T8476] Disabling lock debugging due to kernel taint [ 151.038841][ T8476] Kernel panic - not syncing: panic_on_warn set ... [ 151.045440][ T8476] CPU: 1 PID: 8476 Comm: syz-executor485 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 151.055499][ T8476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 151.065549][ T8476] Call Trace: [ 151.068835][ T8476] dump_stack+0x1df/0x240 [ 151.073179][ T8476] panic+0x3d5/0xc3e [ 151.077153][ T8476] kmsan_report+0x1df/0x1e0 [ 151.081704][ T8476] __msan_warning+0x58/0xa0 [ 151.086215][ T8476] tgr192_pass+0x1a25/0x1ee0 [ 151.090815][ T8476] ? kmsan_get_metadata+0x4f/0x180 [ 151.095918][ T8476] ? kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 151.102070][ T8476] tgr192_transform+0x248/0x1080 [ 151.107018][ T8476] ? is_module_text_address+0x4d/0x2a0 [ 151.112586][ T8476] ? __kernel_text_address+0x171/0x2d0 [ 151.118171][ T8476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 151.124016][ T8476] tgr192_update+0x663/0xb00 [ 151.128622][ T8476] ? tgr192_init+0x150/0x150 [ 151.133201][ T8476] crypto_shash_update+0x4e9/0x550 [ 151.138298][ T8476] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 151.144469][ T8476] ? crypto_hash_walk_first+0x1fd/0x360 [ 151.150011][ T8476] ? kmsan_get_metadata+0x4f/0x180 [ 151.155129][ T8476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 151.160926][ T8476] shash_async_update+0x113/0x1d0 [ 151.165959][ T8476] ? shash_async_init+0x1e0/0x1e0 [ 151.170966][ T8476] hash_sendpage+0x8ef/0xdf0 [ 151.175557][ T8476] ? hash_recvmsg+0xd30/0xd30 [ 151.180265][ T8476] sock_sendpage+0x1e1/0x2c0 [ 151.184859][ T8476] pipe_to_sendpage+0x38c/0x4c0 [ 151.189713][ T8476] ? sock_fasync+0x250/0x250 [ 151.194309][ T8476] __splice_from_pipe+0x565/0xf00 [ 151.199324][ T8476] ? generic_splice_sendpage+0x2d0/0x2d0 [ 151.204964][ T8476] generic_splice_sendpage+0x1d5/0x2d0 [ 151.210443][ T8476] ? iter_file_splice_write+0x1800/0x1800 [ 151.216166][ T8476] direct_splice_actor+0x1fd/0x580 [ 151.221282][ T8476] ? kmsan_get_metadata+0x4f/0x180 [ 151.226432][ T8476] splice_direct_to_actor+0x6b2/0xf50 [ 151.231812][ T8476] ? do_splice_direct+0x580/0x580 [ 151.236902][ T8476] do_splice_direct+0x342/0x580 [ 151.241967][ T8476] do_sendfile+0x101b/0x1d40 [ 151.246574][ T8476] __se_sys_sendfile64+0x2bb/0x360 [ 151.251702][ T8476] ? kmsan_get_metadata+0x4f/0x180 [ 151.256811][ T8476] __x64_sys_sendfile64+0x56/0x70 [ 151.261838][ T8476] do_syscall_64+0xb0/0x150 [ 151.266338][ T8476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 151.272234][ T8476] RIP: 0033:0x4403e9 [ 151.276119][ T8476] Code: Bad RIP value. [ 151.280168][ T8476] RSP: 002b:00007ffc2ab40ab8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 151.288584][ T8476] RAX: ffffffffffffffda RBX: 00007ffc2ab40ac0 RCX: 00000000004403e9 [ 151.296564][ T8476] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000005 [ 151.304538][ T8476] RBP: 00000000006ca018 R08: 65732f636f72702f R09: 65732f636f72702f [ 151.312798][ T8476] R10: 0000000000007ffe R11: 0000000000000246 R12: 0000000000401c50 [ 151.320776][ T8476] R13: 0000000000401ce0 R14: 0000000000000000 R15: 0000000000000000 [ 151.329857][ T8476] Kernel Offset: 0x3a00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 151.341411][ T8476] Rebooting in 86400 seconds..