=====================================================
BUG: KMSAN: uninit-value in subshift lib/crypto/aes.c:149 [inline]
BUG: KMSAN: uninit-value in aes_encrypt+0x15cc/0x1db0 lib/crypto/aes.c:282
 subshift lib/crypto/aes.c:149 [inline]
 aes_encrypt+0x15cc/0x1db0 lib/crypto/aes.c:282
 aesti_encrypt+0x8a/0x110 crypto/aes_ti.c:31
 cipher_crypt_one crypto/cipher.c:76 [inline]
 crypto_cipher_encrypt_one+0x120/0x220 crypto/cipher.c:83
 crypto_cbcmac_digest_update+0x301/0x4b0 crypto/ccm.c:817
 shash_ahash_finup+0x651/0xc30 crypto/shash.c:293
 shash_async_finup+0x7f/0xc0 crypto/shash.c:308
 crypto_ahash_op+0x432/0x930 crypto/ahash.c:337
 crypto_ahash_finup+0x5f/0x80 crypto/ahash.c:362
 crypto_ccm_auth+0x1298/0x1380 crypto/ccm.c:222
 crypto_ccm_encrypt+0x1c9/0x7a0 crypto/ccm.c:301
 crypto_aead_encrypt+0xdc/0x150 crypto/aead.c:94
 tls_do_encryption net/tls/tls_sw.c:529 [inline]
 tls_push_record+0x3b3c/0x4eb0 net/tls/tls_sw.c:762
 bpf_exec_tx_verdict+0x4ed/0x25b0 net/tls/tls_sw.c:802
 tls_sw_do_sendpage+0x1187/0x1b40 net/tls/tls_sw.c:1216
 tls_sw_sendpage+0xe3/0x150 net/tls/tls_sw.c:1280
 inet_sendpage+0x138/0x210 net/ipv4/af_inet.c:845
 kernel_sendpage+0x34c/0x6d0 net/socket.c:3558
 sock_sendpage+0xae/0xf0 net/socket.c:1057
 pipe_to_sendpage+0x30d/0x410 fs/splice.c:361
 splice_from_pipe_feed fs/splice.c:415 [inline]
 __splice_from_pipe+0x438/0xc20 fs/splice.c:559
 splice_from_pipe fs/splice.c:594 [inline]
 generic_splice_sendpage+0x113/0x180 fs/splice.c:743
 do_splice_from fs/splice.c:764 [inline]
 do_splice+0x21b0/0x2980 fs/splice.c:1074
 __do_splice fs/splice.c:1139 [inline]
 __do_sys_splice fs/splice.c:1346 [inline]
 __se_sys_splice+0x5d2/0x8e0 fs/splice.c:1328
 __x64_sys_splice+0x11b/0x1a0 fs/splice.c:1328
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

Uninit was stored to memory at:
 __crypto_xor+0x171/0x1310 lib/crypto/utils.c:45
 crypto_xor include/crypto/algapi.h:176 [inline]
 crypto_cbcmac_digest_update+0x208/0x4b0 crypto/ccm.c:811
 shash_ahash_finup+0x651/0xc30 crypto/shash.c:293
 shash_async_finup+0x7f/0xc0 crypto/shash.c:308
 crypto_ahash_op+0x432/0x930 crypto/ahash.c:337
 crypto_ahash_finup+0x5f/0x80 crypto/ahash.c:362
 crypto_ccm_auth+0x1298/0x1380 crypto/ccm.c:222
 crypto_ccm_encrypt+0x1c9/0x7a0 crypto/ccm.c:301
 crypto_aead_encrypt+0xdc/0x150 crypto/aead.c:94
 tls_do_encryption net/tls/tls_sw.c:529 [inline]
 tls_push_record+0x3b3c/0x4eb0 net/tls/tls_sw.c:762
 bpf_exec_tx_verdict+0x4ed/0x25b0 net/tls/tls_sw.c:802
 tls_sw_do_sendpage+0x1187/0x1b40 net/tls/tls_sw.c:1216
 tls_sw_sendpage+0xe3/0x150 net/tls/tls_sw.c:1280
 inet_sendpage+0x138/0x210 net/ipv4/af_inet.c:845
 kernel_sendpage+0x34c/0x6d0 net/socket.c:3558
 sock_sendpage+0xae/0xf0 net/socket.c:1057
 pipe_to_sendpage+0x30d/0x410 fs/splice.c:361
 splice_from_pipe_feed fs/splice.c:415 [inline]
 __splice_from_pipe+0x438/0xc20 fs/splice.c:559
 splice_from_pipe fs/splice.c:594 [inline]
 generic_splice_sendpage+0x113/0x180 fs/splice.c:743
 do_splice_from fs/splice.c:764 [inline]
 do_splice+0x21b0/0x2980 fs/splice.c:1074
 __do_splice fs/splice.c:1139 [inline]
 __do_sys_splice fs/splice.c:1346 [inline]
 __se_sys_splice+0x5d2/0x8e0 fs/splice.c:1328
 __x64_sys_splice+0x11b/0x1a0 fs/splice.c:1328
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

Uninit was created at:
 __alloc_pages+0x9f6/0xe90 mm/page_alloc.c:5572
 alloc_pages+0xab0/0xd80 mm/mempolicy.c:2287
 skb_page_frag_refill+0x2bf/0x7c0 net/core/sock.c:2867
 sk_page_frag_refill+0x59/0x130 net/core/sock.c:2887
 sk_msg_alloc+0x198/0x10d0 net/core/skmsg.c:39
 tls_alloc_encrypted_msg net/tls/tls_sw.c:283 [inline]
 tls_sw_do_sendpage+0x9a9/0x1b40 net/tls/tls_sw.c:1194
 tls_sw_sendpage+0xe3/0x150 net/tls/tls_sw.c:1280
 inet_sendpage+0x138/0x210 net/ipv4/af_inet.c:845
 kernel_sendpage+0x34c/0x6d0 net/socket.c:3558
 sock_sendpage+0xae/0xf0 net/socket.c:1057
 pipe_to_sendpage+0x30d/0x410 fs/splice.c:361
 splice_from_pipe_feed fs/splice.c:415 [inline]
 __splice_from_pipe+0x438/0xc20 fs/splice.c:559
 splice_from_pipe fs/splice.c:594 [inline]
 generic_splice_sendpage+0x113/0x180 fs/splice.c:743
 do_splice_from fs/splice.c:764 [inline]
 do_splice+0x21b0/0x2980 fs/splice.c:1074
 __do_splice fs/splice.c:1139 [inline]
 __do_sys_splice fs/splice.c:1346 [inline]
 __se_sys_splice+0x5d2/0x8e0 fs/splice.c:1328
 __x64_sys_splice+0x11b/0x1a0 fs/splice.c:1328
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

CPU: 0 PID: 5150 Comm: syz-executor.0 Not tainted 6.2.0-syzkaller-00020-g944070199c5e #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
=====================================================