Warning: Permanently added '10.128.1.21' (ECDSA) to the list of known hosts. 2020/07/17 18:36:35 fuzzer started 2020/07/17 18:36:35 dialing manager at 10.128.0.26:41463 2020/07/17 18:36:37 syscalls: 2944 2020/07/17 18:36:37 code coverage: enabled 2020/07/17 18:36:37 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2020/07/17 18:36:37 extra coverage: enabled 2020/07/17 18:36:37 setuid sandbox: enabled 2020/07/17 18:36:37 namespace sandbox: enabled 2020/07/17 18:36:37 Android sandbox: /sys/fs/selinux/policy does not exist 2020/07/17 18:36:37 fault injection: enabled 2020/07/17 18:36:37 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/07/17 18:36:37 net packet injection: enabled 2020/07/17 18:36:37 net device setup: enabled 2020/07/17 18:36:37 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/07/17 18:36:37 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/07/17 18:36:37 USB emulation: /dev/raw-gadget does not exist 18:37:11 executing program 0: mmap(&(0x7f00000dd000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mincore(&(0x7f0000000000/0x400000)=nil, 0x400003, &(0x7f0000000140)=""/164) [ 184.436129][ T8477] IPVS: ftp: loaded support on port[0] = 21 [ 184.685988][ T8477] chnl_net:caif_netlink_parms(): no params data found [ 184.971387][ T8477] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.979368][ T8477] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.988780][ T8477] device bridge_slave_0 entered promiscuous mode [ 185.032718][ T8477] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.040505][ T8477] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.050069][ T8477] device bridge_slave_1 entered promiscuous mode [ 185.101371][ T8477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.118596][ T8477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.172542][ T8477] team0: Port device team_slave_0 added [ 185.185019][ T8477] team0: Port device team_slave_1 added [ 185.230988][ T8477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.238233][ T8477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.266792][ T8477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.281281][ T8477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.289091][ T8477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.315317][ T8477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.516530][ T8477] device hsr_slave_0 entered promiscuous mode [ 185.660576][ T8477] device hsr_slave_1 entered promiscuous mode [ 186.102903][ T8477] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 186.148272][ T8477] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 186.216549][ T8477] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 186.284200][ T8477] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 186.539975][ T8477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.580495][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.589646][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.626522][ T8477] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.645194][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 186.655617][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.665174][ T3080] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.672489][ T3080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.729458][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.738974][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 186.749624][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.759452][ T3080] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.766801][ T3080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.775800][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 186.786993][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 186.797949][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 186.808796][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 186.819191][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 186.830224][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 186.848716][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 186.858631][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 186.868912][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 186.883365][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 186.893728][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 186.917205][ T8477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 186.999016][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 187.006840][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 187.033120][ T8477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.112204][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 187.122959][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 187.169743][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 187.179464][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 187.197720][ T8477] device veth0_vlan entered promiscuous mode [ 187.221736][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 187.230881][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 187.244666][ T8477] device veth1_vlan entered promiscuous mode [ 187.305387][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 187.315518][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 187.326349][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 187.336433][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 187.356821][ T8477] device veth0_macvtap entered promiscuous mode [ 187.374928][ T8477] device veth1_macvtap entered promiscuous mode [ 187.417164][ T8477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.426547][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 187.437185][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 187.446599][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 187.456778][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 187.477653][ T8477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.499621][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 187.510377][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 18:37:15 executing program 0: mmap(&(0x7f00000dd000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mincore(&(0x7f0000000000/0x400000)=nil, 0x400003, &(0x7f0000000140)=""/164) 18:37:15 executing program 0: mmap(&(0x7f00000dd000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mincore(&(0x7f0000000000/0x400000)=nil, 0x400003, &(0x7f0000000140)=""/164) 18:37:15 executing program 0: mmap(&(0x7f00000dd000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mincore(&(0x7f0000000000/0x400000)=nil, 0x400003, &(0x7f0000000140)=""/164) 18:37:15 executing program 0: perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, 0x0, 0x2}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) socket$inet(0x2, 0x3, 0x2) 18:37:15 executing program 0: perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, 0x0, 0x2}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) socket$inet(0x2, 0x3, 0x2) 18:37:16 executing program 0: perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, 0x0, 0x2}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) socket$inet(0x2, 0x3, 0x2) 18:37:16 executing program 0: perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, 0x0, 0x2}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) socket$inet(0x2, 0x3, 0x2) 18:37:16 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='smaps\x00') bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512\x00'}, 0x58) read(r1, &(0x7f0000000040)=""/118, 0xfd48) r2 = accept$alg(r0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x1c3) [ 189.016400][ T8707] ===================================================== [ 189.023410][ T8707] BUG: KMSAN: uninit-value in wp512_process_buffer+0x49f9/0x4c90 [ 189.031149][ T8707] CPU: 1 PID: 8707 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 189.039739][ T8707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 189.049805][ T8707] Call Trace: [ 189.053134][ T8707] dump_stack+0x1df/0x240 [ 189.057490][ T8707] kmsan_report+0xf7/0x1e0 [ 189.061928][ T8707] __msan_warning+0x58/0xa0 [ 189.066457][ T8707] wp512_process_buffer+0x49f9/0x4c90 [ 189.071882][ T8707] ? kmsan_task_context_state+0x47/0x90 [ 189.077470][ T8707] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 189.083554][ T8707] ? update_stack_state+0xa18/0xb40 [ 189.088782][ T8707] ? kmsan_task_context_state+0x47/0x90 [ 189.094348][ T8707] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 189.100461][ T8707] ? update_stack_state+0xa18/0xb40 [ 189.105691][ T8707] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 189.111780][ T8707] ? __module_address+0x68/0x600 [ 189.116779][ T8707] ? is_module_text_address+0x4d/0x2a0 [ 189.122277][ T8707] ? __kernel_text_address+0x171/0x2d0 [ 189.127760][ T8707] ? unwind_get_return_address+0x8c/0x130 [ 189.133503][ T8707] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 189.139588][ T8707] ? arch_stack_walk+0x2a2/0x3e0 [ 189.144550][ T8707] ? stack_trace_save+0x1a0/0x1a0 [ 189.149616][ T8707] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 189.155707][ T8707] ? stack_trace_save+0x123/0x1a0 [ 189.160787][ T8707] ? kmsan_internal_chain_origin+0xfa/0x130 [ 189.166706][ T8707] ? kmsan_internal_chain_origin+0xad/0x130 [ 189.172614][ T8707] ? __msan_chain_origin+0x50/0x90 [ 189.177736][ T8707] ? wp512_update+0x74a/0xbe0 [ 189.182447][ T8707] ? crypto_shash_update+0x4e9/0x550 [ 189.187758][ T8707] ? shash_finup_unaligned+0xab/0x160 [ 189.193158][ T8707] ? crypto_shash_finup+0x2b4/0x6b0 [ 189.198361][ T8707] ? shash_ahash_finup+0x266/0x740 [ 189.203480][ T8707] ? shash_async_finup+0xbb/0x110 [ 189.208512][ T8707] ? crypto_ahash_op+0x1c6/0x6c0 [ 189.213459][ T8707] ? crypto_ahash_finup+0x8c/0xb0 [ 189.218489][ T8707] ? hash_sendpage+0x870/0xdf0 [ 189.223278][ T8707] ? sock_sendpage+0x1e1/0x2c0 [ 189.228050][ T8707] ? pipe_to_sendpage+0x38c/0x4c0 [ 189.233099][ T8707] ? __splice_from_pipe+0x565/0xf00 [ 189.238397][ T8707] ? generic_splice_sendpage+0x1d5/0x2d0 [ 189.244906][ T8707] ? direct_splice_actor+0x1fd/0x580 [ 189.250219][ T8707] ? splice_direct_to_actor+0x6b2/0xf50 [ 189.255771][ T8707] ? do_splice_direct+0x342/0x580 [ 189.261323][ T8707] ? do_sendfile+0x101b/0x1d40 [ 189.267051][ T8707] ? __se_sys_sendfile64+0x2bb/0x360 [ 189.272830][ T8707] ? __x64_sys_sendfile64+0x56/0x70 [ 189.278734][ T8707] ? do_syscall_64+0xb0/0x150 [ 189.283425][ T8707] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 189.289525][ T8707] ? is_module_text_address+0x4d/0x2a0 [ 189.294988][ T8707] ? kmsan_task_context_state+0x47/0x90 [ 189.300552][ T8707] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 189.306627][ T8707] ? update_stack_state+0xa18/0xb40 [ 189.311865][ T8707] ? kmsan_get_metadata+0x11d/0x180 [ 189.317082][ T8707] wp512_update+0x5ca/0xbe0 [ 189.321632][ T8707] ? wp512_init+0x110/0x110 [ 189.326149][ T8707] crypto_shash_update+0x4e9/0x550 [ 189.331310][ T8707] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 189.337385][ T8707] ? arch_stack_walk+0x2a2/0x3e0 [ 189.342330][ T8707] ? stack_trace_save+0x1a0/0x1a0 [ 189.347373][ T8707] shash_finup_unaligned+0xab/0x160 [ 189.352584][ T8707] ? crypto_shash_finup+0x6b0/0x6b0 [ 189.357786][ T8707] crypto_shash_finup+0x2b4/0x6b0 [ 189.362843][ T8707] ? crypto_hash_walk_first+0x1fd/0x360 [ 189.368569][ T8707] ? kmsan_get_metadata+0x11d/0x180 [ 189.373776][ T8707] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 189.379590][ T8707] shash_ahash_finup+0x266/0x740 [ 189.384668][ T8707] ? kmsan_get_metadata+0x11d/0x180 [ 189.389903][ T8707] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 189.395734][ T8707] ? kmsan_get_metadata+0x11d/0x180 [ 189.401119][ T8707] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 189.406932][ T8707] shash_async_finup+0xbb/0x110 [ 189.411804][ T8707] crypto_ahash_op+0x1c6/0x6c0 [ 189.416580][ T8707] ? kmsan_get_metadata+0x11d/0x180 [ 189.421785][ T8707] ? kmsan_get_metadata+0x11d/0x180 [ 189.426986][ T8707] ? shash_async_final+0x470/0x470 [ 189.432132][ T8707] ? shash_async_final+0x470/0x470 [ 189.437252][ T8707] crypto_ahash_finup+0x8c/0xb0 [ 189.442128][ T8707] hash_sendpage+0x870/0xdf0 [ 189.446739][ T8707] ? hash_recvmsg+0xd30/0xd30 [ 189.451427][ T8707] sock_sendpage+0x1e1/0x2c0 [ 189.456041][ T8707] pipe_to_sendpage+0x38c/0x4c0 [ 189.460928][ T8707] ? sock_fasync+0x250/0x250 [ 189.465549][ T8707] __splice_from_pipe+0x565/0xf00 [ 189.470584][ T8707] ? generic_splice_sendpage+0x2d0/0x2d0 [ 189.476255][ T8707] generic_splice_sendpage+0x1d5/0x2d0 [ 189.481740][ T8707] ? iter_file_splice_write+0x1800/0x1800 [ 189.487473][ T8707] direct_splice_actor+0x1fd/0x580 [ 189.492607][ T8707] ? kmsan_get_metadata+0x4f/0x180 [ 189.497736][ T8707] splice_direct_to_actor+0x6b2/0xf50 [ 189.503132][ T8707] ? do_splice_direct+0x580/0x580 [ 189.508223][ T8707] do_splice_direct+0x342/0x580 [ 189.513107][ T8707] do_sendfile+0x101b/0x1d40 [ 189.517747][ T8707] __se_sys_sendfile64+0x2bb/0x360 [ 189.522866][ T8707] ? kmsan_get_metadata+0x4f/0x180 [ 189.528000][ T8707] __x64_sys_sendfile64+0x56/0x70 [ 189.533057][ T8707] do_syscall_64+0xb0/0x150 [ 189.537575][ T8707] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 189.543470][ T8707] RIP: 0033:0x45c1d9 [ 189.547377][ T8707] Code: Bad RIP value. [ 189.551444][ T8707] RSP: 002b:00007ff5a879fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 189.559863][ T8707] RAX: ffffffffffffffda RBX: 0000000000025a00 RCX: 000000000045c1d9 [ 189.567840][ T8707] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 189.575819][ T8707] RBP: 000000000078bf48 R08: 0000000000000000 R09: 0000000000000000 [ 189.583795][ T8707] R10: 00000000000001c3 R11: 0000000000000246 R12: 000000000078bf0c [ 189.591772][ T8707] R13: 0000000000c9fb6f R14: 00007ff5a87a09c0 R15: 000000000078bf0c [ 189.599783][ T8707] [ 189.602132][ T8707] Uninit was stored to memory at: [ 189.607187][ T8707] kmsan_internal_chain_origin+0xad/0x130 [ 189.612909][ T8707] __msan_chain_origin+0x50/0x90 [ 189.617852][ T8707] wp512_update+0x74a/0xbe0 [ 189.622377][ T8707] crypto_shash_update+0x4e9/0x550 [ 189.627490][ T8707] shash_async_update+0x113/0x1d0 [ 189.632517][ T8707] hash_sendpage+0x8ef/0xdf0 [ 189.637110][ T8707] sock_sendpage+0x1e1/0x2c0 [ 189.641709][ T8707] pipe_to_sendpage+0x38c/0x4c0 [ 189.646565][ T8707] __splice_from_pipe+0x565/0xf00 [ 189.651594][ T8707] generic_splice_sendpage+0x1d5/0x2d0 [ 189.657055][ T8707] direct_splice_actor+0x1fd/0x580 [ 189.662172][ T8707] splice_direct_to_actor+0x6b2/0xf50 [ 189.667548][ T8707] do_splice_direct+0x342/0x580 [ 189.672406][ T8707] do_sendfile+0x101b/0x1d40 [ 189.677011][ T8707] __se_sys_sendfile64+0x2bb/0x360 [ 189.682148][ T8707] __x64_sys_sendfile64+0x56/0x70 [ 189.687203][ T8707] do_syscall_64+0xb0/0x150 [ 189.691736][ T8707] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 189.697654][ T8707] [ 189.699995][ T8707] Uninit was created at: [ 189.704264][ T8707] kmsan_save_stack_with_flags+0x3c/0x90 [ 189.709919][ T8707] kmsan_alloc_page+0xb9/0x180 [ 189.714710][ T8707] __alloc_pages_nodemask+0x56a2/0x5dc0 [ 189.720306][ T8707] alloc_pages_current+0x672/0x990 [ 189.725438][ T8707] push_pipe+0x605/0xb70 [ 189.729703][ T8707] iov_iter_get_pages_alloc+0x18a9/0x21c0 [ 189.735453][ T8707] do_splice_to+0x4fc/0x14f0 [ 189.740073][ T8707] splice_direct_to_actor+0x45c/0xf50 [ 189.745471][ T8707] do_splice_direct+0x342/0x580 [ 189.750371][ T8707] do_sendfile+0x101b/0x1d40 [ 189.754979][ T8707] __se_sys_sendfile64+0x2bb/0x360 [ 189.760107][ T8707] __x64_sys_sendfile64+0x56/0x70 [ 189.765165][ T8707] do_syscall_64+0xb0/0x150 [ 189.769695][ T8707] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 189.775591][ T8707] ===================================================== [ 189.782557][ T8707] Disabling lock debugging due to kernel taint [ 189.788743][ T8707] Kernel panic - not syncing: panic_on_warn set ... [ 189.795359][ T8707] CPU: 1 PID: 8707 Comm: syz-executor.0 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 189.805358][ T8707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 189.815432][ T8707] Call Trace: [ 189.818747][ T8707] dump_stack+0x1df/0x240 [ 189.823096][ T8707] panic+0x3d5/0xc3e [ 189.827040][ T8707] kmsan_report+0x1df/0x1e0 [ 189.831560][ T8707] __msan_warning+0x58/0xa0 [ 189.836081][ T8707] wp512_process_buffer+0x49f9/0x4c90 [ 189.841500][ T8707] ? kmsan_task_context_state+0x47/0x90 [ 189.847063][ T8707] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 189.853132][ T8707] ? update_stack_state+0xa18/0xb40 [ 189.858344][ T8707] ? kmsan_task_context_state+0x47/0x90 [ 189.863902][ T8707] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 189.869973][ T8707] ? update_stack_state+0xa18/0xb40 [ 189.875207][ T8707] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 189.881291][ T8707] ? __module_address+0x68/0x600 [ 189.886259][ T8707] ? is_module_text_address+0x4d/0x2a0 [ 189.891749][ T8707] ? __kernel_text_address+0x171/0x2d0 [ 189.897224][ T8707] ? unwind_get_return_address+0x8c/0x130 [ 189.902963][ T8707] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 189.909041][ T8707] ? arch_stack_walk+0x2a2/0x3e0 [ 189.913981][ T8707] ? stack_trace_save+0x1a0/0x1a0 [ 189.919032][ T8707] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 189.925105][ T8707] ? stack_trace_save+0x123/0x1a0 [ 189.930147][ T8707] ? kmsan_internal_chain_origin+0xfa/0x130 [ 189.936054][ T8707] ? kmsan_internal_chain_origin+0xad/0x130 [ 189.941960][ T8707] ? __msan_chain_origin+0x50/0x90 [ 189.947100][ T8707] ? wp512_update+0x74a/0xbe0 [ 189.951791][ T8707] ? crypto_shash_update+0x4e9/0x550 [ 189.957083][ T8707] ? shash_finup_unaligned+0xab/0x160 [ 189.962464][ T8707] ? crypto_shash_finup+0x2b4/0x6b0 [ 189.967669][ T8707] ? shash_ahash_finup+0x266/0x740 [ 189.972788][ T8707] ? shash_async_finup+0xbb/0x110 [ 189.977817][ T8707] ? crypto_ahash_op+0x1c6/0x6c0 [ 189.982758][ T8707] ? crypto_ahash_finup+0x8c/0xb0 [ 189.987789][ T8707] ? hash_sendpage+0x870/0xdf0 [ 189.992561][ T8707] ? sock_sendpage+0x1e1/0x2c0 [ 189.997341][ T8707] ? pipe_to_sendpage+0x38c/0x4c0 [ 190.002377][ T8707] ? __splice_from_pipe+0x565/0xf00 [ 190.007581][ T8707] ? generic_splice_sendpage+0x1d5/0x2d0 [ 190.013222][ T8707] ? direct_splice_actor+0x1fd/0x580 [ 190.018509][ T8707] ? splice_direct_to_actor+0x6b2/0xf50 [ 190.024067][ T8707] ? do_splice_direct+0x342/0x580 [ 190.029093][ T8707] ? do_sendfile+0x101b/0x1d40 [ 190.033864][ T8707] ? __se_sys_sendfile64+0x2bb/0x360 [ 190.039151][ T8707] ? __x64_sys_sendfile64+0x56/0x70 [ 190.044355][ T8707] ? do_syscall_64+0xb0/0x150 [ 190.049034][ T8707] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 190.055130][ T8707] ? is_module_text_address+0x4d/0x2a0 [ 190.060590][ T8707] ? kmsan_task_context_state+0x47/0x90 [ 190.066147][ T8707] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 190.072219][ T8707] ? update_stack_state+0xa18/0xb40 [ 190.077438][ T8707] ? kmsan_get_metadata+0x11d/0x180 [ 190.082653][ T8707] wp512_update+0x5ca/0xbe0 [ 190.087199][ T8707] ? wp512_init+0x110/0x110 [ 190.091712][ T8707] crypto_shash_update+0x4e9/0x550 [ 190.096854][ T8707] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 190.102929][ T8707] ? arch_stack_walk+0x2a2/0x3e0 [ 190.107886][ T8707] ? stack_trace_save+0x1a0/0x1a0 [ 190.112936][ T8707] shash_finup_unaligned+0xab/0x160 [ 190.118147][ T8707] ? crypto_shash_finup+0x6b0/0x6b0 [ 190.123364][ T8707] crypto_shash_finup+0x2b4/0x6b0 [ 190.128423][ T8707] ? crypto_hash_walk_first+0x1fd/0x360 [ 190.133996][ T8707] ? kmsan_get_metadata+0x11d/0x180 [ 190.139242][ T8707] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 190.145082][ T8707] shash_ahash_finup+0x266/0x740 [ 190.150074][ T8707] ? kmsan_get_metadata+0x11d/0x180 [ 190.155281][ T8707] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 190.161118][ T8707] ? kmsan_get_metadata+0x11d/0x180 [ 190.166330][ T8707] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 190.172143][ T8707] shash_async_finup+0xbb/0x110 [ 190.177011][ T8707] crypto_ahash_op+0x1c6/0x6c0 [ 190.181789][ T8707] ? kmsan_get_metadata+0x11d/0x180 [ 190.187021][ T8707] ? kmsan_get_metadata+0x11d/0x180 [ 190.192235][ T8707] ? shash_async_final+0x470/0x470 [ 190.197372][ T8707] ? shash_async_final+0x470/0x470 [ 190.202498][ T8707] crypto_ahash_finup+0x8c/0xb0 [ 190.207380][ T8707] hash_sendpage+0x870/0xdf0 [ 190.211995][ T8707] ? hash_recvmsg+0xd30/0xd30 [ 190.216706][ T8707] sock_sendpage+0x1e1/0x2c0 [ 190.221343][ T8707] pipe_to_sendpage+0x38c/0x4c0 [ 190.226202][ T8707] ? sock_fasync+0x250/0x250 [ 190.230821][ T8707] __splice_from_pipe+0x565/0xf00 [ 190.235854][ T8707] ? generic_splice_sendpage+0x2d0/0x2d0 [ 190.241551][ T8707] generic_splice_sendpage+0x1d5/0x2d0 [ 190.247048][ T8707] ? iter_file_splice_write+0x1800/0x1800 [ 190.252810][ T8707] direct_splice_actor+0x1fd/0x580 [ 190.257955][ T8707] ? kmsan_get_metadata+0x4f/0x180 [ 190.263096][ T8707] splice_direct_to_actor+0x6b2/0xf50 [ 190.268488][ T8707] ? do_splice_direct+0x580/0x580 [ 190.273568][ T8707] do_splice_direct+0x342/0x580 [ 190.278464][ T8707] do_sendfile+0x101b/0x1d40 [ 190.283109][ T8707] __se_sys_sendfile64+0x2bb/0x360 [ 190.288497][ T8707] ? kmsan_get_metadata+0x4f/0x180 [ 190.293631][ T8707] __x64_sys_sendfile64+0x56/0x70 [ 190.298671][ T8707] do_syscall_64+0xb0/0x150 [ 190.303192][ T8707] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 190.309083][ T8707] RIP: 0033:0x45c1d9 [ 190.312970][ T8707] Code: Bad RIP value. [ 190.317034][ T8707] RSP: 002b:00007ff5a879fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 190.325446][ T8707] RAX: ffffffffffffffda RBX: 0000000000025a00 RCX: 000000000045c1d9 [ 190.333422][ T8707] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 190.341401][ T8707] RBP: 000000000078bf48 R08: 0000000000000000 R09: 0000000000000000 [ 190.349376][ T8707] R10: 00000000000001c3 R11: 0000000000000246 R12: 000000000078bf0c [ 190.357350][ T8707] R13: 0000000000c9fb6f R14: 00007ff5a87a09c0 R15: 000000000078bf0c [ 190.366442][ T8707] Kernel Offset: 0x1c600000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 190.378068][ T8707] Rebooting in 86400 seconds..