===================================================== BUG: KMSAN: uninit-value in u128_xor include/crypto/b128ops.h:66 [inline] BUG: KMSAN: uninit-value in be128_xor include/crypto/b128ops.h:72 [inline] BUG: KMSAN: uninit-value in gf128mul_4k_lle+0x1fb/0x2b0 crypto/gf128mul.c:394 CPU: 0 PID: 19904 Comm: syz-executor.3 Not tainted 5.4.0-rc8-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1c9/0x220 lib/dump_stack.c:118 kmsan_report+0x128/0x220 mm/kmsan/kmsan_report.c:108 __msan_warning+0x64/0xc0 mm/kmsan/kmsan_instr.c:245 u128_xor include/crypto/b128ops.h:66 [inline] be128_xor include/crypto/b128ops.h:72 [inline] gf128mul_4k_lle+0x1fb/0x2b0 crypto/gf128mul.c:394 ghash_update+0x9db/0x1130 crypto/ghash-generic.c:103 crypto_shash_update crypto/shash.c:107 [inline] shash_ahash_update+0x53a/0x650 crypto/shash.c:247 shash_async_update+0x50/0x60 crypto/shash.c:255 crypto_ahash_update include/crypto/hash.h:534 [inline] gcm_hash_update crypto/gcm.c:219 [inline] gcm_hash_assoc_remain_continue crypto/gcm.c:328 [inline] gcm_hash_assoc_continue crypto/gcm.c:359 [inline] gcm_hash_init_continue crypto/gcm.c:384 [inline] gcm_hash+0x15d8/0x2400 crypto/gcm.c:414 gcm_encrypt_continue crypto/gcm.c:439 [inline] crypto_gcm_encrypt+0x710/0x9e0 crypto/gcm.c:468 crypto_aead_encrypt+0xf2/0x180 crypto/aead.c:99 tls_do_encryption net/tls/tls_sw.c:521 [inline] tls_push_record+0x3438/0x4eb0 net/tls/tls_sw.c:730 bpf_exec_tx_verdict+0x1454/0x1c80 net/tls/tls_sw.c:770 tls_sw_do_sendpage net/tls/tls_sw.c:1168 [inline] tls_sw_sendpage+0x1315/0x1b70 net/tls/tls_sw.c:1219 inet_sendpage+0x1ab/0x2c0 net/ipv4/af_inet.c:821 kernel_sendpage net/socket.c:3682 [inline] sock_sendpage+0x1f1/0x2e0 net/socket.c:935 pipe_to_sendpage+0x342/0x470 fs/splice.c:449 splice_from_pipe_feed fs/splice.c:500 [inline] __splice_from_pipe+0x484/0xe80 fs/splice.c:624 splice_from_pipe fs/splice.c:659 [inline] generic_splice_sendpage+0x1d5/0x2d0 fs/splice.c:829 do_splice_from fs/splice.c:848 [inline] do_splice fs/splice.c:1155 [inline] __do_sys_splice fs/splice.c:1425 [inline] __se_sys_splice+0x2141/0x3320 fs/splice.c:1405 __x64_sys_splice+0x6e/0x90 fs/splice.c:1405 do_syscall_64+0xb6/0x160 arch/x86/entry/common.c:291 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x45a639 Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007fcd3f66cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045a639 RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000005 RBP: 000000000075bf20 R08: 0000000100000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcd3f66d6d4 R13: 00000000004ca797 R14: 00000000004e1bd8 R15: 00000000ffffffff Uninit was stored to memory at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:149 [inline] kmsan_internal_chain_origin+0xbd/0x180 mm/kmsan/kmsan.c:317 __msan_chain_origin+0x5c/0xc0 mm/kmsan/kmsan_instr.c:179 crypto_xor include/crypto/algapi.h:209 [inline] ghash_update+0xa83/0x1130 crypto/ghash-generic.c:102 crypto_shash_update crypto/shash.c:107 [inline] shash_ahash_update+0x53a/0x650 crypto/shash.c:247 shash_async_update+0x50/0x60 crypto/shash.c:255 crypto_ahash_update include/crypto/hash.h:534 [inline] gcm_hash_update crypto/gcm.c:219 [inline] gcm_hash_assoc_remain_continue crypto/gcm.c:328 [inline] gcm_hash_assoc_continue crypto/gcm.c:359 [inline] gcm_hash_init_continue crypto/gcm.c:384 [inline] gcm_hash+0x15d8/0x2400 crypto/gcm.c:414 gcm_encrypt_continue crypto/gcm.c:439 [inline] crypto_gcm_encrypt+0x710/0x9e0 crypto/gcm.c:468 crypto_aead_encrypt+0xf2/0x180 crypto/aead.c:99 tls_do_encryption net/tls/tls_sw.c:521 [inline] tls_push_record+0x3438/0x4eb0 net/tls/tls_sw.c:730 bpf_exec_tx_verdict+0x1454/0x1c80 net/tls/tls_sw.c:770 tls_sw_do_sendpage net/tls/tls_sw.c:1168 [inline] tls_sw_sendpage+0x1315/0x1b70 net/tls/tls_sw.c:1219 inet_sendpage+0x1ab/0x2c0 net/ipv4/af_inet.c:821 kernel_sendpage net/socket.c:3682 [inline] sock_sendpage+0x1f1/0x2e0 net/socket.c:935 pipe_to_sendpage+0x342/0x470 fs/splice.c:449 splice_from_pipe_feed fs/splice.c:500 [inline] __splice_from_pipe+0x484/0xe80 fs/splice.c:624 splice_from_pipe fs/splice.c:659 [inline] generic_splice_sendpage+0x1d5/0x2d0 fs/splice.c:829 do_splice_from fs/splice.c:848 [inline] do_splice fs/splice.c:1155 [inline] __do_sys_splice fs/splice.c:1425 [inline] __se_sys_splice+0x2141/0x3320 fs/splice.c:1405 __x64_sys_splice+0x6e/0x90 fs/splice.c:1405 do_syscall_64+0xb6/0x160 arch/x86/entry/common.c:291 entry_SYSCALL_64_after_hwframe+0x44/0xa9 Uninit was stored to memory at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:149 [inline] kmsan_internal_chain_origin+0xbd/0x180 mm/kmsan/kmsan.c:317 __msan_chain_origin+0x5c/0xc0 mm/kmsan/kmsan_instr.c:179 __crypto_xor+0x1e8/0x1470 crypto/algapi.c:992 crypto_xor include/crypto/algapi.h:213 [inline] crypto_ctr_crypt_inplace crypto/ctr.c:87 [inline] crypto_ctr_crypt+0x613/0xaf0 crypto/ctr.c:111 crypto_skcipher_encrypt+0xd2/0x150 crypto/skcipher.c:855 crypto_gcm_encrypt+0x4a5/0x9e0 crypto/gcm.c:467 crypto_aead_encrypt+0xf2/0x180 crypto/aead.c:99 tls_do_encryption net/tls/tls_sw.c:521 [inline] tls_push_record+0x3438/0x4eb0 net/tls/tls_sw.c:730 bpf_exec_tx_verdict+0x1454/0x1c80 net/tls/tls_sw.c:770 tls_sw_do_sendpage net/tls/tls_sw.c:1168 [inline] tls_sw_sendpage+0x1315/0x1b70 net/tls/tls_sw.c:1219 inet_sendpage+0x1ab/0x2c0 net/ipv4/af_inet.c:821 kernel_sendpage net/socket.c:3682 [inline] sock_sendpage+0x1f1/0x2e0 net/socket.c:935 pipe_to_sendpage+0x342/0x470 fs/splice.c:449 splice_from_pipe_feed fs/splice.c:500 [inline] __splice_from_pipe+0x484/0xe80 fs/splice.c:624 splice_from_pipe fs/splice.c:659 [inline] generic_splice_sendpage+0x1d5/0x2d0 fs/splice.c:829 do_splice_from fs/splice.c:848 [inline] do_splice fs/splice.c:1155 [inline] __do_sys_splice fs/splice.c:1425 [inline] __se_sys_splice+0x2141/0x3320 fs/splice.c:1405 __x64_sys_splice+0x6e/0x90 fs/splice.c:1405 do_syscall_64+0xb6/0x160 arch/x86/entry/common.c:291 entry_SYSCALL_64_after_hwframe+0x44/0xa9 Uninit was created at: kmsan_save_stack_with_flags+0x3f/0x90 mm/kmsan/kmsan.c:149 kmsan_internal_alloc_meta_for_pages mm/kmsan/kmsan_shadow.c:362 [inline] kmsan_alloc_page+0x140/0x330 mm/kmsan/kmsan_shadow.c:391 __alloc_pages_nodemask+0x1421/0x5fd0 mm/page_alloc.c:4799 alloc_pages_current+0x68d/0x9a0 mm/mempolicy.c:2192 alloc_pages include/linux/gfp.h:534 [inline] skb_page_frag_refill+0x2b0/0x580 net/core/sock.c:2376 sk_page_frag_refill+0xa4/0x330 net/core/sock.c:2396 sk_msg_alloc+0x203/0x1050 net/core/skmsg.c:37 tls_alloc_encrypted_msg net/tls/tls_sw.c:284 [inline] tls_sw_do_sendpage net/tls/tls_sw.c:1145 [inline] tls_sw_sendpage+0xb71/0x1b70 net/tls/tls_sw.c:1219 inet_sendpage+0x1ab/0x2c0 net/ipv4/af_inet.c:821 kernel_sendpage net/socket.c:3682 [inline] sock_sendpage+0x1f1/0x2e0 net/socket.c:935 pipe_to_sendpage+0x342/0x470 fs/splice.c:449 splice_from_pipe_feed fs/splice.c:500 [inline] __splice_from_pipe+0x484/0xe80 fs/splice.c:624 splice_from_pipe fs/splice.c:659 [inline] generic_splice_sendpage+0x1d5/0x2d0 fs/splice.c:829 do_splice_from fs/splice.c:848 [inline] do_splice fs/splice.c:1155 [inline] __do_sys_splice fs/splice.c:1425 [inline] __se_sys_splice+0x2141/0x3320 fs/splice.c:1405 __x64_sys_splice+0x6e/0x90 fs/splice.c:1405 do_syscall_64+0xb6/0x160 arch/x86/entry/common.c:291 entry_SYSCALL_64_after_hwframe+0x44/0xa9 =====================================================