Warning: Permanently added '10.128.0.247' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program syzkaller login: [ 148.039584][ T8502] ===================================================== [ 148.046563][ T8502] BUG: KMSAN: uninit-value in aes_encrypt+0x12c5/0x1bc0 [ 148.053493][ T8502] CPU: 1 PID: 8502 Comm: syz-executor773 Not tainted 5.8.0-rc5-syzkaller #0 [ 148.062322][ T8502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 148.072366][ T8502] Call Trace: [ 148.075645][ T8502] dump_stack+0x21c/0x280 [ 148.079973][ T8502] kmsan_report+0xf7/0x1e0 [ 148.084390][ T8502] __msan_warning+0x58/0xa0 [ 148.088900][ T8502] aes_encrypt+0x12c5/0x1bc0 [ 148.093497][ T8502] ? do_splice+0x2727/0x39e0 [ 148.098109][ T8502] aesti_encrypt+0xe8/0x130 [ 148.102634][ T8502] crypto_cipher_encrypt_one+0x1e2/0x3a0 [ 148.108259][ T8502] ? aesti_set_key+0xb0/0xb0 [ 148.112832][ T8502] ? kmsan_get_metadata+0x116/0x180 [ 148.118032][ T8502] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 148.123831][ T8502] crypto_cbcmac_digest_update+0x3e3/0x560 [ 148.129636][ T8502] ? crypto_cbcmac_digest_init+0x1a0/0x1a0 [ 148.135457][ T8502] crypto_shash_update+0x455/0x5a0 [ 148.140556][ T8502] ? kmsan_get_metadata+0x116/0x180 [ 148.145734][ T8502] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 148.151518][ T8502] shash_ahash_finup+0x20b/0x7a0 [ 148.156445][ T8502] ? kmsan_get_metadata+0x116/0x180 [ 148.161633][ T8502] ? kmsan_get_metadata+0x116/0x180 [ 148.166811][ T8502] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 148.172612][ T8502] shash_async_finup+0xbb/0x110 [ 148.177469][ T8502] crypto_ahash_op+0x1c3/0x770 [ 148.182216][ T8502] ? kmsan_get_metadata+0x116/0x180 [ 148.187412][ T8502] ? kmsan_get_metadata+0x116/0x180 [ 148.199798][ T8502] ? shash_async_final+0x4b0/0x4b0 [ 148.204893][ T8502] ? shash_async_final+0x4b0/0x4b0 [ 148.209997][ T8502] crypto_ahash_finup+0x8c/0xb0 [ 148.214828][ T8502] crypto_ccm_auth+0x16b6/0x1780 [ 148.219766][ T8502] crypto_ccm_encrypt+0x285/0x850 [ 148.224774][ T8502] ? crypto_ccm_setauthsize+0xe0/0xe0 [ 148.230135][ T8502] crypto_aead_encrypt+0x107/0x190 [ 148.235268][ T8502] tls_push_record+0x3cb9/0x4fc0 [ 148.240185][ T8502] ? tls_sw_sendpage+0x1da/0x250 [ 148.245123][ T8502] ? pcibios_fixup_bus+0xa00/0xca0 [ 148.250241][ T8502] bpf_exec_tx_verdict+0x195a/0x29e0 [ 148.255537][ T8502] ? update_load_avg+0x860/0x1340 [ 148.260582][ T8502] tls_sw_do_sendpage+0x138a/0x1e30 [ 148.265781][ T8502] tls_sw_sendpage+0x1da/0x250 [ 148.270543][ T8502] ? tls_sw_do_sendpage+0x1e30/0x1e30 [ 148.275907][ T8502] inet_sendpage+0x1dc/0x2f0 [ 148.280492][ T8502] ? inet_sendmsg+0x1d0/0x1d0 [ 148.285148][ T8502] sock_sendpage+0x1dc/0x2b0 [ 148.289728][ T8502] pipe_to_sendpage+0x3f4/0x530 [ 148.294556][ T8502] ? sock_fasync+0x250/0x250 [ 148.299133][ T8502] __splice_from_pipe+0x5e3/0xff0 [ 148.304136][ T8502] ? generic_splice_sendpage+0x2d0/0x2d0 [ 148.309778][ T8502] generic_splice_sendpage+0x1d5/0x2d0 [ 148.315233][ T8502] ? iter_file_splice_write+0x1b70/0x1b70 [ 148.320944][ T8502] do_splice+0x2727/0x39e0 [ 148.325354][ T8502] ? datagram_poll+0x850/0x850 [ 148.330097][ T8502] ? tls_setsockopt+0x4b8/0x1640 [ 148.335014][ T8502] ? kmsan_get_metadata+0x116/0x180 [ 148.340195][ T8502] ? kmsan_get_metadata+0x116/0x180 [ 148.345373][ T8502] ? kmsan_set_origin_checked+0x95/0xf0 [ 148.350912][ T8502] __se_sys_splice+0x323/0x500 [ 148.355660][ T8502] __x64_sys_splice+0x6e/0x90 [ 148.360319][ T8502] do_syscall_64+0xad/0x160 [ 148.364803][ T8502] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 148.370673][ T8502] RIP: 0033:0x446a29 [ 148.374543][ T8502] Code: Bad RIP value. [ 148.378608][ T8502] RSP: 002b:00007f11fb607d98 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 148.386995][ T8502] RAX: ffffffffffffffda RBX: 00000000006dbc48 RCX: 0000000000446a29 [ 148.394956][ T8502] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 148.402918][ T8502] RBP: 00000000006dbc40 R08: 00080000fffffffc R09: 0000000000000000 [ 148.410866][ T8502] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc4c [ 148.418817][ T8502] R13: 0000000020000680 R14: 00000000004ae948 R15: 20c49ba5e353f7cf [ 148.426769][ T8502] [ 148.429078][ T8502] Uninit was stored to memory at: [ 148.434097][ T8502] kmsan_internal_chain_origin+0xad/0x130 [ 148.439793][ T8502] __msan_chain_origin+0x50/0x90 [ 148.444705][ T8502] __crypto_xor+0x251/0x1610 [ 148.449275][ T8502] crypto_cbcmac_digest_update+0x2b8/0x560 [ 148.455144][ T8502] crypto_shash_update+0x455/0x5a0 [ 148.460231][ T8502] shash_ahash_finup+0x20b/0x7a0 [ 148.465144][ T8502] shash_async_finup+0xbb/0x110 [ 148.469984][ T8502] crypto_ahash_op+0x1c3/0x770 [ 148.474739][ T8502] crypto_ahash_finup+0x8c/0xb0 [ 148.479569][ T8502] crypto_ccm_auth+0x16b6/0x1780 [ 148.484511][ T8502] crypto_ccm_encrypt+0x285/0x850 [ 148.489511][ T8502] crypto_aead_encrypt+0x107/0x190 [ 148.494633][ T8502] tls_push_record+0x3cb9/0x4fc0 [ 148.499560][ T8502] bpf_exec_tx_verdict+0x195a/0x29e0 [ 148.504821][ T8502] tls_sw_do_sendpage+0x138a/0x1e30 [ 148.509994][ T8502] tls_sw_sendpage+0x1da/0x250 [ 148.514738][ T8502] inet_sendpage+0x1dc/0x2f0 [ 148.519321][ T8502] sock_sendpage+0x1dc/0x2b0 [ 148.523889][ T8502] pipe_to_sendpage+0x3f4/0x530 [ 148.528727][ T8502] __splice_from_pipe+0x5e3/0xff0 [ 148.533755][ T8502] generic_splice_sendpage+0x1d5/0x2d0 [ 148.539190][ T8502] do_splice+0x2727/0x39e0 [ 148.543590][ T8502] __se_sys_splice+0x323/0x500 [ 148.548352][ T8502] __x64_sys_splice+0x6e/0x90 [ 148.553006][ T8502] do_syscall_64+0xad/0x160 [ 148.557487][ T8502] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 148.563361][ T8502] [ 148.565676][ T8502] Uninit was created at: [ 148.569898][ T8502] kmsan_save_stack_with_flags+0x3c/0x90 [ 148.575516][ T8502] kmsan_alloc_page+0xc5/0x1a0 [ 148.580272][ T8502] __alloc_pages_nodemask+0xdf0/0x1030 [ 148.585706][ T8502] alloc_pages_current+0x685/0xb50 [ 148.590796][ T8502] skb_page_frag_refill+0x540/0x780 [ 148.595982][ T8502] sk_page_frag_refill+0xa3/0x3b0 [ 148.601036][ T8502] sk_msg_alloc+0x26e/0x1340 [ 148.605626][ T8502] tls_sw_do_sendpage+0xb0d/0x1e30 [ 148.610717][ T8502] tls_sw_sendpage+0x1da/0x250 [ 148.615459][ T8502] inet_sendpage+0x1dc/0x2f0 [ 148.620026][ T8502] sock_sendpage+0x1dc/0x2b0 [ 148.624596][ T8502] pipe_to_sendpage+0x3f4/0x530 [ 148.629429][ T8502] __splice_from_pipe+0x5e3/0xff0 [ 148.634432][ T8502] generic_splice_sendpage+0x1d5/0x2d0 [ 148.639975][ T8502] do_splice+0x2727/0x39e0 [ 148.644375][ T8502] __se_sys_splice+0x323/0x500 [ 148.649122][ T8502] __x64_sys_splice+0x6e/0x90 [ 148.653779][ T8502] do_syscall_64+0xad/0x160 [ 148.658282][ T8502] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 148.664164][ T8502] ===================================================== [ 148.671074][ T8502] Disabling lock debugging due to kernel taint [ 148.677204][ T8502] Kernel panic - not syncing: panic_on_warn set ... [ 148.683774][ T8502] CPU: 1 PID: 8502 Comm: syz-executor773 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 148.693805][ T8502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 148.703848][ T8502] Call Trace: [ 148.707121][ T8502] dump_stack+0x21c/0x280 [ 148.711451][ T8502] panic+0x4d7/0xef7 [ 148.715347][ T8502] ? add_taint+0x17c/0x210 [ 148.719746][ T8502] kmsan_report+0x1df/0x1e0 [ 148.724230][ T8502] __msan_warning+0x58/0xa0 [ 148.728735][ T8502] aes_encrypt+0x12c5/0x1bc0 [ 148.733327][ T8502] ? do_splice+0x2727/0x39e0 [ 148.737929][ T8502] aesti_encrypt+0xe8/0x130 [ 148.742423][ T8502] crypto_cipher_encrypt_one+0x1e2/0x3a0 [ 148.748041][ T8502] ? aesti_set_key+0xb0/0xb0 [ 148.752616][ T8502] ? kmsan_get_metadata+0x116/0x180 [ 148.757813][ T8502] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 148.763657][ T8502] crypto_cbcmac_digest_update+0x3e3/0x560 [ 148.769461][ T8502] ? crypto_cbcmac_digest_init+0x1a0/0x1a0 [ 148.775272][ T8502] crypto_shash_update+0x455/0x5a0 [ 148.780382][ T8502] ? kmsan_get_metadata+0x116/0x180 [ 148.785558][ T8502] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 148.791402][ T8502] shash_ahash_finup+0x20b/0x7a0 [ 148.796385][ T8502] ? kmsan_get_metadata+0x116/0x180 [ 148.801566][ T8502] ? kmsan_get_metadata+0x116/0x180 [ 148.806742][ T8502] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 148.812529][ T8502] shash_async_finup+0xbb/0x110 [ 148.817372][ T8502] crypto_ahash_op+0x1c3/0x770 [ 148.822119][ T8502] ? kmsan_get_metadata+0x116/0x180 [ 148.827306][ T8502] ? kmsan_get_metadata+0x116/0x180 [ 148.832497][ T8502] ? shash_async_final+0x4b0/0x4b0 [ 148.837587][ T8502] ? shash_async_final+0x4b0/0x4b0 [ 148.842680][ T8502] crypto_ahash_finup+0x8c/0xb0 [ 148.847511][ T8502] crypto_ccm_auth+0x16b6/0x1780 [ 148.852486][ T8502] crypto_ccm_encrypt+0x285/0x850 [ 148.857500][ T8502] ? crypto_ccm_setauthsize+0xe0/0xe0 [ 148.862849][ T8502] crypto_aead_encrypt+0x107/0x190 [ 148.867942][ T8502] tls_push_record+0x3cb9/0x4fc0 [ 148.872859][ T8502] ? tls_sw_sendpage+0x1da/0x250 [ 148.877780][ T8502] ? pcibios_fixup_bus+0xa00/0xca0 [ 148.882916][ T8502] bpf_exec_tx_verdict+0x195a/0x29e0 [ 148.888204][ T8502] ? update_load_avg+0x860/0x1340 [ 148.893237][ T8502] tls_sw_do_sendpage+0x138a/0x1e30 [ 148.898436][ T8502] tls_sw_sendpage+0x1da/0x250 [ 148.903183][ T8502] ? tls_sw_do_sendpage+0x1e30/0x1e30 [ 148.908551][ T8502] inet_sendpage+0x1dc/0x2f0 [ 148.913140][ T8502] ? inet_sendmsg+0x1d0/0x1d0 [ 148.919705][ T8502] sock_sendpage+0x1dc/0x2b0 [ 148.924298][ T8502] pipe_to_sendpage+0x3f4/0x530 [ 148.929139][ T8502] ? sock_fasync+0x250/0x250 [ 148.933748][ T8502] __splice_from_pipe+0x5e3/0xff0 [ 148.938765][ T8502] ? generic_splice_sendpage+0x2d0/0x2d0 [ 148.944389][ T8502] generic_splice_sendpage+0x1d5/0x2d0 [ 148.949863][ T8502] ? iter_file_splice_write+0x1b70/0x1b70 [ 148.955598][ T8502] do_splice+0x2727/0x39e0 [ 148.959999][ T8502] ? datagram_poll+0x850/0x850 [ 148.964741][ T8502] ? tls_setsockopt+0x4b8/0x1640 [ 148.969664][ T8502] ? kmsan_get_metadata+0x116/0x180 [ 148.974840][ T8502] ? kmsan_get_metadata+0x116/0x180 [ 148.980032][ T8502] ? kmsan_set_origin_checked+0x95/0xf0 [ 148.985578][ T8502] __se_sys_splice+0x323/0x500 [ 148.990348][ T8502] __x64_sys_splice+0x6e/0x90 [ 148.995037][ T8502] do_syscall_64+0xad/0x160 [ 148.999537][ T8502] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 149.005431][ T8502] RIP: 0033:0x446a29 [ 149.009303][ T8502] Code: Bad RIP value. [ 149.013345][ T8502] RSP: 002b:00007f11fb607d98 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 149.021734][ T8502] RAX: ffffffffffffffda RBX: 00000000006dbc48 RCX: 0000000000446a29 [ 149.031875][ T8502] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 149.039954][ T8502] RBP: 00000000006dbc40 R08: 00080000fffffffc R09: 0000000000000000 [ 149.052256][ T8502] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc4c [ 149.060208][ T8502] R13: 0000000020000680 R14: 00000000004ae948 R15: 20c49ba5e353f7cf [ 149.069567][ T8502] Kernel Offset: disabled [ 149.073885][ T8502] Rebooting in 86400 seconds..