[ OK ] Started OpenBSD Secure Shell server. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.143' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 87.213669][ T8457] ===================================================== [ 87.220645][ T8457] BUG: KMSAN: uninit-value in sha256_update+0x8bf0/0x9090 [ 87.227769][ T8457] CPU: 1 PID: 8457 Comm: syz-executor589 Not tainted 5.8.0-rc5-syzkaller #0 [ 87.236412][ T8457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 87.246447][ T8457] Call Trace: [ 87.249729][ T8457] dump_stack+0x1df/0x240 [ 87.254049][ T8457] kmsan_report+0xf7/0x1e0 [ 87.258457][ T8457] __msan_warning+0x58/0xa0 [ 87.262977][ T8457] sha256_update+0x8bf0/0x9090 [ 87.267727][ T8457] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 87.273774][ T8457] ? update_stack_state+0xa18/0xb40 [ 87.278953][ T8457] ? kmsan_get_metadata+0x11d/0x180 [ 87.284151][ T8457] ? kmsan_task_context_state+0x47/0x90 [ 87.289680][ T8457] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 87.295731][ T8457] ? update_stack_state+0xa18/0xb40 [ 87.300916][ T8457] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 87.306965][ T8457] ? __module_address+0x68/0x600 [ 87.311915][ T8457] ? __kernel_text_address+0x171/0x2d0 [ 87.317362][ T8457] ? unwind_get_return_address+0x8c/0x130 [ 87.323068][ T8457] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 87.329201][ T8457] ? arch_stack_walk+0x2a2/0x3e0 [ 87.334121][ T8457] ? stack_trace_save+0x1a0/0x1a0 [ 87.339148][ T8457] crypto_sha256_finup+0xa3/0x1b0 [ 87.344160][ T8457] ? crypto_sha256_update+0xb0/0xb0 [ 87.349335][ T8457] crypto_shash_finup+0x2b4/0x6b0 [ 87.354386][ T8457] ? hash_sendpage+0x48c/0xdf0 [ 87.359135][ T8457] ? sock_sendpage+0x1e1/0x2c0 [ 87.363891][ T8457] ? kmsan_get_metadata+0x11d/0x180 [ 87.369258][ T8457] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 87.375046][ T8457] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 87.381179][ T8457] ? crypto_sha224_init+0x158/0x210 [ 87.386362][ T8457] shash_digest_unaligned+0x22b/0x260 [ 87.391721][ T8457] ? crypto_shash_digest+0x3d0/0x3d0 [ 87.397025][ T8457] shash_ahash_digest+0x788/0x8a0 [ 87.402050][ T8457] shash_async_digest+0xbb/0x110 [ 87.406975][ T8457] crypto_ahash_op+0x1c6/0x6c0 [ 87.411729][ T8457] ? __kmalloc+0x115/0x460 [ 87.416177][ T8457] ? kmsan_get_metadata+0x11d/0x180 [ 87.421394][ T8457] ? kmsan_get_metadata+0x11d/0x180 [ 87.426581][ T8457] ? shash_async_finup+0x110/0x110 [ 87.431673][ T8457] ? shash_async_finup+0x110/0x110 [ 87.436771][ T8457] crypto_ahash_digest+0xdc/0x150 [ 87.441793][ T8457] hash_sendpage+0x9cc/0xdf0 [ 87.446392][ T8457] ? hash_recvmsg+0xd30/0xd30 [ 87.451053][ T8457] sock_sendpage+0x1e1/0x2c0 [ 87.455641][ T8457] pipe_to_sendpage+0x38c/0x4c0 [ 87.460481][ T8457] ? sock_fasync+0x250/0x250 [ 87.465073][ T8457] __splice_from_pipe+0x565/0xf00 [ 87.470083][ T8457] ? generic_splice_sendpage+0x2d0/0x2d0 [ 87.475720][ T8457] generic_splice_sendpage+0x1d5/0x2d0 [ 87.481203][ T8457] ? iter_file_splice_write+0x1800/0x1800 [ 87.486919][ T8457] direct_splice_actor+0x1fd/0x580 [ 87.492020][ T8457] ? kmsan_get_metadata+0x4f/0x180 [ 87.497128][ T8457] splice_direct_to_actor+0x6b2/0xf50 [ 87.502491][ T8457] ? do_splice_direct+0x580/0x580 [ 87.507525][ T8457] do_splice_direct+0x342/0x580 [ 87.512387][ T8457] do_sendfile+0x101b/0x1d40 [ 87.516985][ T8457] __se_sys_sendfile64+0x2bb/0x360 [ 87.522079][ T8457] ? kmsan_get_metadata+0x4f/0x180 [ 87.527188][ T8457] __x64_sys_sendfile64+0x56/0x70 [ 87.532204][ T8457] do_syscall_64+0xb0/0x150 [ 87.536692][ T8457] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 87.542587][ T8457] RIP: 0033:0x4403c9 [ 87.546474][ T8457] Code: Bad RIP value. [ 87.550536][ T8457] RSP: 002b:00007ffeb83f6c88 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 87.558931][ T8457] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004403c9 [ 87.566991][ T8457] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 87.574943][ T8457] RBP: 00000000006ca018 R08: 0000000000000014 R09: 65732f636f72702f [ 87.582927][ T8457] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000401c30 [ 87.590893][ T8457] R13: 0000000000401cc0 R14: 0000000000000000 R15: 0000000000000000 [ 87.598869][ T8457] [ 87.601172][ T8457] Uninit was created at: [ 87.605396][ T8457] kmsan_save_stack_with_flags+0x3c/0x90 [ 87.611008][ T8457] kmsan_alloc_page+0xb9/0x180 [ 87.615753][ T8457] __alloc_pages_nodemask+0x56a2/0x5dc0 [ 87.621275][ T8457] alloc_pages_current+0x672/0x990 [ 87.626369][ T8457] push_pipe+0x605/0xb70 [ 87.630609][ T8457] iov_iter_get_pages_alloc+0x18a9/0x21c0 [ 87.636309][ T8457] do_splice_to+0x4fc/0x14f0 [ 87.640885][ T8457] splice_direct_to_actor+0x45c/0xf50 [ 87.646237][ T8457] do_splice_direct+0x342/0x580 [ 87.651066][ T8457] do_sendfile+0x101b/0x1d40 [ 87.655634][ T8457] __se_sys_sendfile64+0x2bb/0x360 [ 87.660723][ T8457] __x64_sys_sendfile64+0x56/0x70 [ 87.665728][ T8457] do_syscall_64+0xb0/0x150 [ 87.670219][ T8457] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 87.676083][ T8457] ===================================================== [ 87.682986][ T8457] Disabling lock debugging due to kernel taint [ 87.689124][ T8457] Kernel panic - not syncing: panic_on_warn set ... [ 87.695692][ T8457] CPU: 1 PID: 8457 Comm: syz-executor589 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 87.705736][ T8457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 87.715767][ T8457] Call Trace: [ 87.719043][ T8457] dump_stack+0x1df/0x240 [ 87.723379][ T8457] panic+0x3d5/0xc3e [ 87.727293][ T8457] kmsan_report+0x1df/0x1e0 [ 87.731793][ T8457] __msan_warning+0x58/0xa0 [ 87.736286][ T8457] sha256_update+0x8bf0/0x9090 [ 87.741031][ T8457] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 87.747086][ T8457] ? update_stack_state+0xa18/0xb40 [ 87.752278][ T8457] ? kmsan_get_metadata+0x11d/0x180 [ 87.757494][ T8457] ? kmsan_task_context_state+0x47/0x90 [ 87.763041][ T8457] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 87.769105][ T8457] ? update_stack_state+0xa18/0xb40 [ 87.774305][ T8457] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 87.780354][ T8457] ? __module_address+0x68/0x600 [ 87.785336][ T8457] ? __kernel_text_address+0x171/0x2d0 [ 87.790780][ T8457] ? unwind_get_return_address+0x8c/0x130 [ 87.796494][ T8457] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 87.802551][ T8457] ? arch_stack_walk+0x2a2/0x3e0 [ 87.807470][ T8457] ? stack_trace_save+0x1a0/0x1a0 [ 87.812498][ T8457] crypto_sha256_finup+0xa3/0x1b0 [ 87.817507][ T8457] ? crypto_sha256_update+0xb0/0xb0 [ 87.822685][ T8457] crypto_shash_finup+0x2b4/0x6b0 [ 87.827712][ T8457] ? hash_sendpage+0x48c/0xdf0 [ 87.832468][ T8457] ? sock_sendpage+0x1e1/0x2c0 [ 87.837222][ T8457] ? kmsan_get_metadata+0x11d/0x180 [ 87.842411][ T8457] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 87.848199][ T8457] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 87.854333][ T8457] ? crypto_sha224_init+0x158/0x210 [ 87.859525][ T8457] shash_digest_unaligned+0x22b/0x260 [ 87.864895][ T8457] ? crypto_shash_digest+0x3d0/0x3d0 [ 87.870169][ T8457] shash_ahash_digest+0x788/0x8a0 [ 87.875201][ T8457] shash_async_digest+0xbb/0x110 [ 87.880123][ T8457] crypto_ahash_op+0x1c6/0x6c0 [ 87.884881][ T8457] ? __kmalloc+0x115/0x460 [ 87.889280][ T8457] ? kmsan_get_metadata+0x11d/0x180 [ 87.894459][ T8457] ? kmsan_get_metadata+0x11d/0x180 [ 87.899645][ T8457] ? shash_async_finup+0x110/0x110 [ 87.904747][ T8457] ? shash_async_finup+0x110/0x110 [ 87.909848][ T8457] crypto_ahash_digest+0xdc/0x150 [ 87.914861][ T8457] hash_sendpage+0x9cc/0xdf0 [ 87.919443][ T8457] ? hash_recvmsg+0xd30/0xd30 [ 87.924111][ T8457] sock_sendpage+0x1e1/0x2c0 [ 87.928729][ T8457] pipe_to_sendpage+0x38c/0x4c0 [ 87.933562][ T8457] ? sock_fasync+0x250/0x250 [ 87.938165][ T8457] __splice_from_pipe+0x565/0xf00 [ 87.943175][ T8457] ? generic_splice_sendpage+0x2d0/0x2d0 [ 87.948808][ T8457] generic_splice_sendpage+0x1d5/0x2d0 [ 87.954258][ T8457] ? iter_file_splice_write+0x1800/0x1800 [ 87.960024][ T8457] direct_splice_actor+0x1fd/0x580 [ 87.965168][ T8457] ? kmsan_get_metadata+0x4f/0x180 [ 87.970272][ T8457] splice_direct_to_actor+0x6b2/0xf50 [ 87.975656][ T8457] ? do_splice_direct+0x580/0x580 [ 87.980683][ T8457] do_splice_direct+0x342/0x580 [ 87.985536][ T8457] do_sendfile+0x101b/0x1d40 [ 87.990130][ T8457] __se_sys_sendfile64+0x2bb/0x360 [ 87.995225][ T8457] ? kmsan_get_metadata+0x4f/0x180 [ 88.000325][ T8457] __x64_sys_sendfile64+0x56/0x70 [ 88.005365][ T8457] do_syscall_64+0xb0/0x150 [ 88.009857][ T8457] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 88.015727][ T8457] RIP: 0033:0x4403c9 [ 88.019628][ T8457] Code: Bad RIP value. [ 88.023673][ T8457] RSP: 002b:00007ffeb83f6c88 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 88.032061][ T8457] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004403c9 [ 88.040036][ T8457] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 88.047989][ T8457] RBP: 00000000006ca018 R08: 0000000000000014 R09: 65732f636f72702f [ 88.055954][ T8457] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000401c30 [ 88.063904][ T8457] R13: 0000000000401cc0 R14: 0000000000000000 R15: 0000000000000000 [ 88.072943][ T8457] Kernel Offset: 0x1b400000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 88.084568][ T8457] Rebooting in 86400 seconds..