SYSC_sendfile64 fs/read_write.c:1502 [inline] SyS_sendfile64+0xf5/0x110 fs/read_write.c:1488 do_syscall_64+0x1c9/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 general protection fault: 0000 [#1] PREEMPT SMP KASAN RIP: 0033:0x446879 Modules linked in: RSP: 002b:00007faa8189ed08 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 CPU: 1 PID: 11617 Comm: syz-executor373 Not tainted 4.14.170-syzkaller #0 RAX: ffffffffffffffda RBX: 00000000006dbc38 RCX: 0000000000446879 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 task: ffff88809a708540 task.stack: ffff88808be40000 RBP: 00000000006dbc30 R08: 0000000000000002 R09: 0000000000003931 RIP: 0010:scatterwalk_start include/crypto/scatterwalk.h:86 [inline] RIP: 0010:scatterwalk_pagedone include/crypto/scatterwalk.h:111 [inline] RIP: 0010:scatterwalk_copychunks+0x3c5/0x690 crypto/scatterwalk.c:55 R10: 0000000000006785 R11: 0000000000000246 R12: 00000000006dbc3c RSP: 0018:ffff88808be47370 EFLAGS: 00010202 R13: 00007faa8189ed10 R14: 0000000000000008 R15: 0000000000000000 RAX: 0000000000000000 RBX: ffff88808c23c364 RCX: 000000000000401d RDX: 0000000000000002 RSI: 0000000000000010 RDI: ffff88808c23c358 RBP: ffff88808be473d0 R08: ffffed10115eb804 R09: ffffed10115eb800 R10: 0000000000000000 R11: ffff88808af5c01c R12: 0000000000001000 R13: ffff88808be47410 R14: 000000000000001d R15: dffffc0000000000 FS: 00007faa818c0700(0000) GS:ffff8880aef00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020000200 CR3: 000000008a724000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: scatterwalk_map_and_copy+0x10d/0x1a0 crypto/scatterwalk.c:72 gcmaes_encrypt.constprop.14+0x2d7/0xae0 arch/x86/crypto/aesni-intel_glue.c:802 generic_gcmaes_encrypt+0xf8/0x13d arch/x86/crypto/aesni-intel_glue.c:1111 crypto_aead_encrypt include/crypto/aead.h:330 [inline] gcmaes_wrapper_encrypt+0xe5/0x140 arch/x86/crypto/aesni-intel_glue.c:945 crypto_aead_encrypt include/crypto/aead.h:330 [inline] tls_do_encryption net/tls/tls_sw.c:234 [inline] tls_push_record+0x8ec/0x14d0 net/tls/tls_sw.c:270 tls_sw_sendpage+0x446/0xc50 net/tls/tls_sw.c:617 inet_sendpage+0x125/0x600 net/ipv4/af_inet.c:779 kernel_sendpage+0x63/0xd0 net/socket.c:3407 sock_sendpage+0x6d/0xd0 net/socket.c:871 pipe_to_sendpage+0x208/0x420 fs/splice.c:451 splice_from_pipe_feed fs/splice.c:502 [inline] __splice_from_pipe+0x2d4/0x730 fs/splice.c:626 splice_from_pipe+0xb5/0x110 fs/splice.c:661 generic_splice_sendpage+0x10/0x20 fs/splice.c:832 do_splice_from fs/splice.c:851 [inline] direct_splice_actor+0x107/0x1c0 fs/splice.c:1018 splice_direct_to_actor+0x27f/0x760 fs/splice.c:973 do_splice_direct+0x144/0x250 fs/splice.c:1061 do_sendfile+0x463/0xd00 fs/read_write.c:1441 SYSC_sendfile64 fs/read_write.c:1502 [inline] SyS_sendfile64+0xf5/0x110 fs/read_write.c:1488 do_syscall_64+0x1c9/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x446879 RSP: 002b:00007faa818bfd08 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 0000000000446879 RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 RBP: 00000000006dbc20 R08: 0000000000000002 R09: 65732f636f003931 R10: 0000000000006785 R11: 0000000000000246 R12: 00000000006dbc2c R13: 00007faa818bfd10 R14: 0000000000000005 R15: 0000000000000000 Code: ff ff 48 89 c7 e8 8c fc 26 00 4c 89 ea 48 c1 ea 03 42 80 3c 3a 00 0f 85 84 01 00 00 48 8d 70 10 49 89 45 00 48 89 f2 48 c1 ea 03 <42> 0f b6 14 3a 84 d2 74 09 80 fa 03 0f 8e 4d 02 00 00 48 8b 5d RIP: scatterwalk_start include/crypto/scatterwalk.h:86 [inline] RSP: ffff88808be47370 RIP: scatterwalk_pagedone include/crypto/scatterwalk.h:111 [inline] RSP: ffff88808be47370 RIP: scatterwalk_copychunks+0x3c5/0x690 crypto/scatterwalk.c:55 RSP: ffff88808be47370 ---[ end trace b00768579699918c ]---