syzbot


WARNING in mfill_zeropage

Status: closed as invalid on 2018/06/27 14:58
Subsystems: mm
[Documentation on labels]
First crash: 2695d, last: 2695d

Sample crash report:
WARNING: CPU: 1 PID: 5514 at mm/userfaultfd.c:463 __mcopy_atomic mm/userfaultfd.c:413 [inline]
WARNING: CPU: 1 PID: 5514 at mm/userfaultfd.c:463 mfill_zeropage+0x69b/0x16e0 mm/userfaultfd.c:574
Kernel panic - not syncing: panic_on_warn set ...

CPU: 1 PID: 5514 Comm: syz-executor2 Not tainted 4.16.0+ #83
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:53
 panic+0x39d/0x940 kernel/panic.c:183
==================================================================
BUG: KMSAN: uninit-value in core_kernel_text kernel/extable.c:77 [inline]
BUG: KMSAN: uninit-value in kernel_text_address+0x248/0x3a0 kernel/extable.c:127
CPU: 1 PID: 5514 Comm: syz-executor2 Not tainted 4.16.0+ #83
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14a/0x1d0 lib/dump_stack.c:53
 kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1067
 __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:676
 core_kernel_text kernel/extable.c:77 [inline]
 kernel_text_address+0x248/0x3a0 kernel/extable.c:127
 __kernel_text_address+0x34/0xe0 kernel/extable.c:107
 show_trace_log_lvl+0x954/0x1030 arch/x86/kernel/dumpstack.c:175
 show_stack+0xfc/0x150 arch/x86/kernel/dumpstack.c:236
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:53
 panic+0x39d/0x940 kernel/panic.c:183
 __warn+0x40f/0x580 kernel/panic.c:547
 report_bug+0x72a/0x880 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:179 [inline]
 do_error_trap+0x1aa/0x600 arch/x86/kernel/traps.c:297
 do_invalid_op+0x46/0x50 arch/x86/kernel/traps.c:316
 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:986
RIP: 0010:__mcopy_atomic mm/userfaultfd.c:413 [inline]
RIP: 0010:mfill_zeropage+0x69b/0x16e0 mm/userfaultfd.c:574
RSP: 0018:ffff88016515f9a8 EFLAGS: 00010287
RAX: ffffffff81cf322b RBX: 0000000000000000 RCX: 0000000000040000
RDX: ffffc9000256a000 RSI: 0000000000000016 RDI: 0000000000000017
RBP: ffff88016515faf0 R08: 0000000001080020 R09: 0000000000000002
R10: 00007fffdf003000 R11: 0000000000000000 R12: ffff880167990918
R13: 0000000000000000 R14: 00000000000002fa R15: ffff880166b6c800
 userfaultfd_zeropage fs/userfaultfd.c:1723 [inline]
 userfaultfd_ioctl+0x2949/0x6350 fs/userfaultfd.c:1820
 vfs_ioctl fs/ioctl.c:46 [inline]
 do_vfs_ioctl+0xaf0/0x2440 fs/ioctl.c:686
 SYSC_ioctl+0x1d2/0x260 fs/ioctl.c:701
 SyS_ioctl+0x54/0x80 fs/ioctl.c:692
 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x3d/0xa2
RIP: 0033:0x455279
RSP: 002b:00007f6af5423c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f6af54246d4 RCX: 0000000000455279
RDX: 0000000020000240 RSI: 00000000c020aa04 RDI: 0000000000000014
RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 000000000000033d R14: 00000000006f7e58 R15: 0000000000000001

Local variable description: ----oldbit.i.i.i@update_curr
Variable was created at:
 update_curr+0x48/0x1060 kernel/sched/fair.c:819
 dequeue_entity kernel/sched/fair.c:4107 [inline]
 dequeue_task_fair+0xf9/0x2ea0 kernel/sched/fair.c:5266
==================================================================
==================================================================
BUG: KMSAN: uninit-value in show_trace_log_lvl+0xd4d/0x1030 arch/x86/kernel/dumpstack.c:175
CPU: 1 PID: 5514 Comm: syz-executor2 Tainted: G    B            4.16.0+ #83
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14a/0x1d0 lib/dump_stack.c:53
 kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1067
 __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:676
 show_trace_log_lvl+0xd4d/0x1030 arch/x86/kernel/dumpstack.c:175
 show_stack+0xfc/0x150 arch/x86/kernel/dumpstack.c:236
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:53
 panic+0x39d/0x940 kernel/panic.c:183
 __warn+0x40f/0x580 kernel/panic.c:547
 report_bug+0x72a/0x880 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:179 [inline]
 do_error_trap+0x1aa/0x600 arch/x86/kernel/traps.c:297
 do_invalid_op+0x46/0x50 arch/x86/kernel/traps.c:316
 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:986
RIP: 0010:__mcopy_atomic mm/userfaultfd.c:413 [inline]
RIP: 0010:mfill_zeropage+0x69b/0x16e0 mm/userfaultfd.c:574
RSP: 0018:ffff88016515f9a8 EFLAGS: 00010287
RAX: ffffffff81cf322b RBX: 0000000000000000 RCX: 0000000000040000
RDX: ffffc9000256a000 RSI: 0000000000000016 RDI: 0000000000000017
RBP: ffff88016515faf0 R08: 0000000001080020 R09: 0000000000000002
R10: 00007fffdf003000 R11: 0000000000000000 R12: ffff880167990918
R13: 0000000000000000 R14: 00000000000002fa R15: ffff880166b6c800
 userfaultfd_zeropage fs/userfaultfd.c:1723 [inline]
 userfaultfd_ioctl+0x2949/0x6350 fs/userfaultfd.c:1820
 vfs_ioctl fs/ioctl.c:46 [inline]
 do_vfs_ioctl+0xaf0/0x2440 fs/ioctl.c:686
 SYSC_ioctl+0x1d2/0x260 fs/ioctl.c:701
 SyS_ioctl+0x54/0x80 fs/ioctl.c:692
 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x3d/0xa2
RIP: 0033:0x455279
RSP: 002b:00007f6af5423c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f6af54246d4 RCX: 0000000000455279
RDX: 0000000020000240 RSI: 00000000c020aa04 RDI: 0000000000000014
RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 000000000000033d R14: 00000000006f7e58 R15: 0000000000000001

Local variable description: ----oldbit.i.i.i@update_curr
Variable was created at:
 update_curr+0x48/0x1060 kernel/sched/fair.c:819
 dequeue_entity kernel/sched/fair.c:4107 [inline]
 dequeue_task_fair+0xf9/0x2ea0 kernel/sched/fair.c:5266
==================================================================
 __warn+0x40f/0x580 kernel/panic.c:547
 report_bug+0x72a/0x880 lib/bug.c:186
==================================================================
BUG: KMSAN: uninit-value in on_stack arch/x86/include/asm/stacktrace.h:44 [inline]
BUG: KMSAN: uninit-value in update_stack_state+0x4ec/0xa40 arch/x86/kernel/unwind_frame.c:238
CPU: 1 PID: 5514 Comm: syz-executor2 Tainted: G    B            4.16.0+ #83
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14a/0x1d0 lib/dump_stack.c:53
 kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1067
 __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:676
 on_stack arch/x86/include/asm/stacktrace.h:44 [inline]
 update_stack_state+0x4ec/0xa40 arch/x86/kernel/unwind_frame.c:238
 unwind_next_frame+0x618/0xe50 arch/x86/kernel/unwind_frame.c:329
 show_trace_log_lvl+0xb49/0x1030 arch/x86/kernel/dumpstack.c:212
 show_stack+0xfc/0x150 arch/x86/kernel/dumpstack.c:236
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:53
 panic+0x39d/0x940 kernel/panic.c:183
 __warn+0x40f/0x580 kernel/panic.c:547
 report_bug+0x72a/0x880 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:179 [inline]
 do_error_trap+0x1aa/0x600 arch/x86/kernel/traps.c:297
 do_invalid_op+0x46/0x50 arch/x86/kernel/traps.c:316
 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:986
RIP: 0010:__mcopy_atomic mm/userfaultfd.c:413 [inline]
RIP: 0010:mfill_zeropage+0x69b/0x16e0 mm/userfaultfd.c:574
RSP: 0018:ffff88016515f9a8 EFLAGS: 00010287
RAX: ffffffff81cf322b RBX: 0000000000000000 RCX: 0000000000040000
RDX: ffffc9000256a000 RSI: 0000000000000016 RDI: 0000000000000017
RBP: ffff88016515faf0 R08: 0000000001080020 R09: 0000000000000002
R10: 00007fffdf003000 R11: 0000000000000000 R12: ffff880167990918
R13: 0000000000000000 R14: 00000000000002fa R15: ffff880166b6c800
 userfaultfd_zeropage fs/userfaultfd.c:1723 [inline]
 userfaultfd_ioctl+0x2949/0x6350 fs/userfaultfd.c:1820
 vfs_ioctl fs/ioctl.c:46 [inline]
 do_vfs_ioctl+0xaf0/0x2440 fs/ioctl.c:686
 SYSC_ioctl+0x1d2/0x260 fs/ioctl.c:701
 SyS_ioctl+0x54/0x80 fs/ioctl.c:692
 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x3d/0xa2
RIP: 0033:0x455279
RSP: 002b:00007f6af5423c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f6af54246d4 RCX: 0000000000455279
RDX: 0000000020000240 RSI: 00000000c020aa04 RDI: 0000000000000014
RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 000000000000033d R14: 00000000006f7e58 R15: 0000000000000001

Local variable description: ----oldbit.i.i.i@pick_next_task_fair
Variable was created at:
 pick_next_task_fair+0x63/0x1f70 kernel/sched/fair.c:6642
 pick_next_task+0x1b4/0x410 kernel/sched/core.c:3290
==================================================================
==================================================================
BUG: KMSAN: uninit-value in update_stack_state+0x565/0xa40 arch/x86/kernel/unwind_frame.c:238
CPU: 1 PID: 5514 Comm: syz-executor2 Tainted: G    B            4.16.0+ #83
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14a/0x1d0 lib/dump_stack.c:53
 kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1067
 __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:676
 update_stack_state+0x565/0xa40 arch/x86/kernel/unwind_frame.c:238
 unwind_next_frame+0x618/0xe50 arch/x86/kernel/unwind_frame.c:329
 show_trace_log_lvl+0xb49/0x1030 arch/x86/kernel/dumpstack.c:212
 show_stack+0xfc/0x150 arch/x86/kernel/dumpstack.c:236
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:53
 panic+0x39d/0x940 kernel/panic.c:183
 __warn+0x40f/0x580 kernel/panic.c:547
 report_bug+0x72a/0x880 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:179 [inline]
 do_error_trap+0x1aa/0x600 arch/x86/kernel/traps.c:297
 do_invalid_op+0x46/0x50 arch/x86/kernel/traps.c:316
 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:986
RIP: 0010:__mcopy_atomic mm/userfaultfd.c:413 [inline]
RIP: 0010:mfill_zeropage+0x69b/0x16e0 mm/userfaultfd.c:574
RSP: 0018:ffff88016515f9a8 EFLAGS: 00010287
RAX: ffffffff81cf322b RBX: 0000000000000000 RCX: 0000000000040000
RDX: ffffc9000256a000 RSI: 0000000000000016 RDI: 0000000000000017
RBP: ffff88016515faf0 R08: 0000000001080020 R09: 0000000000000002
R10: 00007fffdf003000 R11: 0000000000000000 R12: ffff880167990918
R13: 0000000000000000 R14: 00000000000002fa R15: ffff880166b6c800
 userfaultfd_zeropage fs/userfaultfd.c:1723 [inline]
 userfaultfd_ioctl+0x2949/0x6350 fs/userfaultfd.c:1820
 vfs_ioctl fs/ioctl.c:46 [inline]
 do_vfs_ioctl+0xaf0/0x2440 fs/ioctl.c:686
 SYSC_ioctl+0x1d2/0x260 fs/ioctl.c:701
 SyS_ioctl+0x54/0x80 fs/ioctl.c:692
 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x3d/0xa2
RIP: 0033:0x455279
RSP: 002b:00007f6af5423c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f6af54246d4 RCX: 0000000000455279
RDX: 0000000020000240 RSI: 00000000c020aa04 RDI: 0000000000000014
RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 000000000000033d R14: 00000000006f7e58 R15: 0000000000000001

Local variable description: ----oldbit.i.i.i@pick_next_task_fair
Variable was created at:
 pick_next_task_fair+0x63/0x1f70 kernel/sched/fair.c:6642
 pick_next_task+0x1b4/0x410 kernel/sched/core.c:3290
==================================================================
==================================================================
BUG: KMSAN: uninit-value in update_stack_state+0x6f1/0xa40 arch/x86/kernel/unwind_frame.c:244
CPU: 1 PID: 5514 Comm: syz-executor2 Tainted: G    B            4.16.0+ #83
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14a/0x1d0 lib/dump_stack.c:53
 kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1067
 __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:676
 update_stack_state+0x6f1/0xa40 arch/x86/kernel/unwind_frame.c:244
 unwind_next_frame+0x618/0xe50 arch/x86/kernel/unwind_frame.c:329
 show_trace_log_lvl+0xb49/0x1030 arch/x86/kernel/dumpstack.c:212
 show_stack+0xfc/0x150 arch/x86/kernel/dumpstack.c:236
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:53
 panic+0x39d/0x940 kernel/panic.c:183
 __warn+0x40f/0x580 kernel/panic.c:547
 report_bug+0x72a/0x880 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:179 [inline]
 do_error_trap+0x1aa/0x600 arch/x86/kernel/traps.c:297
 do_invalid_op+0x46/0x50 arch/x86/kernel/traps.c:316
 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:986
RIP: 0010:__mcopy_atomic mm/userfaultfd.c:413 [inline]
RIP: 0010:mfill_zeropage+0x69b/0x16e0 mm/userfaultfd.c:574
RSP: 0018:ffff88016515f9a8 EFLAGS: 00010287
RAX: ffffffff81cf322b RBX: 0000000000000000 RCX: 0000000000040000
RDX: ffffc9000256a000 RSI: 0000000000000016 RDI: 0000000000000017
RBP: ffff88016515faf0 R08: 0000000001080020 R09: 0000000000000002
R10: 00007fffdf003000 R11: 0000000000000000 R12: ffff880167990918
R13: 0000000000000000 R14: 00000000000002fa R15: ffff880166b6c800
 userfaultfd_zeropage fs/userfaultfd.c:1723 [inline]
 userfaultfd_ioctl+0x2949/0x6350 fs/userfaultfd.c:1820
 vfs_ioctl fs/ioctl.c:46 [inline]
 do_vfs_ioctl+0xaf0/0x2440 fs/ioctl.c:686
 SYSC_ioctl+0x1d2/0x260 fs/ioctl.c:701
 SyS_ioctl+0x54/0x80 fs/ioctl.c:692
 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x3d/0xa2
RIP: 0033:0x455279
RSP: 002b:00007f6af5423c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f6af54246d4 RCX: 0000000000455279
RDX: 0000000020000240 RSI: 00000000c020aa04 RDI: 0000000000000014
RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 000000000000033d R14: 00000000006f7e58 R15: 0000000000000001

Local variable description: ----oldbit.i.i.i@pick_next_task_fair
Variable was created at:
 pick_next_task_fair+0x63/0x1f70 kernel/sched/fair.c:6642
 pick_next_task+0x1b4/0x410 kernel/sched/core.c:3290
==================================================================
==================================================================
BUG: KMSAN: uninit-value in update_stack_state+0x91f/0xa40 arch/x86/kernel/unwind_frame.c:27
CPU: 1 PID: 5514 Comm: syz-executor2 Tainted: G    B            4.16.0+ #83
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14a/0x1d0 lib/dump_stack.c:53
 kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1067
 __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:676
 update_stack_state+0x91f/0xa40 arch/x86/kernel/unwind_frame.c:27
 unwind_next_frame+0x618/0xe50 arch/x86/kernel/unwind_frame.c:329
 show_trace_log_lvl+0xb49/0x1030 arch/x86/kernel/dumpstack.c:212
 show_stack+0xfc/0x150 arch/x86/kernel/dumpstack.c:236
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:53
 panic+0x39d/0x940 kernel/panic.c:183
 __warn+0x40f/0x580 kernel/panic.c:547
 report_bug+0x72a/0x880 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:179 [inline]
 do_error_trap+0x1aa/0x600 arch/x86/kernel/traps.c:297
 do_invalid_op+0x46/0x50 arch/x86/kernel/traps.c:316
 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:986
RIP: 0010:__mcopy_atomic mm/userfaultfd.c:413 [inline]
RIP: 0010:mfill_zeropage+0x69b/0x16e0 mm/userfaultfd.c:574
RSP: 0018:ffff88016515f9a8 EFLAGS: 00010287
RAX: ffffffff81cf322b RBX: 0000000000000000 RCX: 0000000000040000
RDX: ffffc9000256a000 RSI: 0000000000000016 RDI: 0000000000000017
RBP: ffff88016515faf0 R08: 0000000001080020 R09: 0000000000000002
R10: 00007fffdf003000 R11: 0000000000000000 R12: ffff880167990918
R13: 0000000000000000 R14: 00000000000002fa R15: ffff880166b6c800
 userfaultfd_zeropage fs/userfaultfd.c:1723 [inline]
 userfaultfd_ioctl+0x2949/0x6350 fs/userfaultfd.c:1820
 vfs_ioctl fs/ioctl.c:46 [inline]
 do_vfs_ioctl+0xaf0/0x2440 fs/ioctl.c:686
 SYSC_ioctl+0x1d2/0x260 fs/ioctl.c:701
 SyS_ioctl+0x54/0x80 fs/ioctl.c:692
 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x3d/0xa2
RIP: 0033:0x455279
RSP: 002b:00007f6af5423c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f6af54246d4 RCX: 0000000000455279
RDX: 0000000020000240 RSI: 00000000c020aa04 RDI: 0000000000000014
RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 000000000000033d R14: 00000000006f7e58 R15: 0000000000000001

Local variable description: ----oldbit.i.i.i@pick_next_task_fair
Variable was created at:
 pick_next_task_fair+0x63/0x1f70 kernel/sched/fair.c:6642
 pick_next_task+0x1b4/0x410 kernel/sched/core.c:3290
==================================================================
==================================================================
BUG: KMSAN: uninit-value in core_kernel_text kernel/extable.c:77 [inline]
BUG: KMSAN: uninit-value in kernel_text_address+0x248/0x3a0 kernel/extable.c:127
CPU: 1 PID: 5514 Comm: syz-executor2 Tainted: G    B            4.16.0+ #83
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14a/0x1d0 lib/dump_stack.c:53
 kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1067
 __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:676
 core_kernel_text kernel/extable.c:77 [inline]
 kernel_text_address+0x248/0x3a0 kernel/extable.c:127
 __kernel_text_address+0x34/0xe0 kernel/extable.c:107
 show_trace_log_lvl+0x954/0x1030 arch/x86/kernel/dumpstack.c:175
 show_stack+0xfc/0x150 arch/x86/kernel/dumpstack.c:236
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:53
 panic+0x39d/0x940 kernel/panic.c:183
 __warn+0x40f/0x580 kernel/panic.c:547
 report_bug+0x72a/0x880 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:179 [inline]
 do_error_trap+0x1aa/0x600 arch/x86/kernel/traps.c:297
 do_invalid_op+0x46/0x50 arch/x86/kernel/traps.c:316
 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:986
RIP: 0010:__mcopy_atomic mm/userfaultfd.c:413 [inline]
RIP: 0010:mfill_zeropage+0x69b/0x16e0 mm/userfaultfd.c:574
RSP: 0018:ffff88016515f9a8 EFLAGS: 00010287
RAX: ffffffff81cf322b RBX: 0000000000000000 RCX: 0000000000040000
RDX: ffffc9000256a000 RSI: 0000000000000016 RDI: 0000000000000017
RBP: ffff88016515faf0 R08: 0000000001080020 R09: 0000000000000002
R10: 00007fffdf003000 R11: 0000000000000000 R12: ffff880167990918
R13: 0000000000000000 R14: 00000000000002fa R15: ffff880166b6c800
 userfaultfd_zeropage fs/userfaultfd.c:1723 [inline]
 userfaultfd_ioctl+0x2949/0x6350 fs/userfaultfd.c:1820
 vfs_ioctl fs/ioctl.c:46 [inline]
 do_vfs_ioctl+0xaf0/0x2440 fs/ioctl.c:686
 SYSC_ioctl+0x1d2/0x260 fs/ioctl.c:701
 SyS_ioctl+0x54/0x80 fs/ioctl.c:692
 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x3d/0xa2
RIP: 0033:0x455279
RSP: 002b:00007f6af5423c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f6af54246d4 RCX: 0000000000455279
RDX: 0000000020000240 RSI: 00000000c020aa04 RDI: 0000000000000014
RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 000000000000033d R14: 00000000006f7e58 R15: 0000000000000001

Local variable description: ----ldt.i.i.i@switch_mm_irqs_off
Variable was created at:
 switch_mm_irqs_off+0xe6/0x15d0 arch/x86/mm/tlb.c:183
 context_switch kernel/sched/core.c:2854 [inline]
 __schedule+0x5a3/0x730 kernel/sched/core.c:3446
==================================================================
==================================================================
BUG: KMSAN: uninit-value in show_trace_log_lvl+0xd4d/0x1030 arch/x86/kernel/dumpstack.c:175
CPU: 1 PID: 5514 Comm: syz-executor2 Tainted: G    B            4.16.0+ #83
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14a/0x1d0 lib/dump_stack.c:53
 kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1067
 __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:676
 show_trace_log_lvl+0xd4d/0x1030 arch/x86/kernel/dumpstack.c:175
 show_stack+0xfc/0x150 arch/x86/kernel/dumpstack.c:236
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:53
 panic+0x39d/0x940 kernel/panic.c:183
 __warn+0x40f/0x580 kernel/panic.c:547
 report_bug+0x72a/0x880 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:179 [inline]
 do_error_trap+0x1aa/0x600 arch/x86/kernel/traps.c:297
 do_invalid_op+0x46/0x50 arch/x86/kernel/traps.c:316
 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:986
RIP: 0010:__mcopy_atomic mm/userfaultfd.c:413 [inline]
RIP: 0010:mfill_zeropage+0x69b/0x16e0 mm/userfaultfd.c:574
RSP: 0018:ffff88016515f9a8 EFLAGS: 00010287
RAX: ffffffff81cf322b RBX: 0000000000000000 RCX: 0000000000040000
RDX: ffffc9000256a000 RSI: 0000000000000016 RDI: 0000000000000017
RBP: ffff88016515faf0 R08: 0000000001080020 R09: 0000000000000002
R10: 00007fffdf003000 R11: 0000000000000000 R12: ffff880167990918
R13: 0000000000000000 R14: 00000000000002fa R15: ffff880166b6c800
 userfaultfd_zeropage fs/userfaultfd.c:1723 [inline]
 userfaultfd_ioctl+0x2949/0x6350 fs/userfaultfd.c:1820
 vfs_ioctl fs/ioctl.c:46 [inline]
 do_vfs_ioctl+0xaf0/0x2440 fs/ioctl.c:686
 SYSC_ioctl+0x1d2/0x260 fs/ioctl.c:701
 SyS_ioctl+0x54/0x80 fs/ioctl.c:692
 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x3d/0xa2
RIP: 0033:0x455279
RSP: 002b:00007f6af5423c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f6af54246d4 RCX: 0000000000455279
RDX: 0000000020000240 RSI: 00000000c020aa04 RDI: 0000000000000014
RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 000000000000033d R14: 00000000006f7e58 R15: 0000000000000001

Local variable description: ----ldt.i.i.i@switch_mm_irqs_off
Variable was created at:
 switch_mm_irqs_off+0xe6/0x15d0 arch/x86/mm/tlb.c:183
 context_switch kernel/sched/core.c:2854 [inline]
 __schedule+0x5a3/0x730 kernel/sched/core.c:3446
==================================================================
==================================================================
BUG: KMSAN: uninit-value in core_kernel_text kernel/extable.c:77 [inline]
BUG: KMSAN: uninit-value in kernel_text_address+0x248/0x3a0 kernel/extable.c:127
CPU: 1 PID: 5514 Comm: syz-executor2 Tainted: G    B            4.16.0+ #83
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14a/0x1d0 lib/dump_stack.c:53
 kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1067
 __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:676
 core_kernel_text kernel/extable.c:77 [inline]
 kernel_text_address+0x248/0x3a0 kernel/extable.c:127
 __kernel_text_address+0x34/0xe0 kernel/extable.c:107
 show_trace_log_lvl+0x954/0x1030 arch/x86/kernel/dumpstack.c:175
 show_stack+0xfc/0x150 arch/x86/kernel/dumpstack.c:236
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:53
 panic+0x39d/0x940 kernel/panic.c:183
 __warn+0x40f/0x580 kernel/panic.c:547
 report_bug+0x72a/0x880 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:179 [inline]
 do_error_trap+0x1aa/0x600 arch/x86/kernel/traps.c:297
 do_invalid_op+0x46/0x50 arch/x86/kernel/traps.c:316
 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:986
RIP: 0010:__mcopy_atomic mm/userfaultfd.c:413 [inline]
RIP: 0010:mfill_zeropage+0x69b/0x16e0 mm/userfaultfd.c:574
RSP: 0018:ffff88016515f9a8 EFLAGS: 00010287
RAX: ffffffff81cf322b RBX: 0000000000000000 RCX: 0000000000040000
RDX: ffffc9000256a000 RSI: 0000000000000016 RDI: 0000000000000017
RBP: ffff88016515faf0 R08: 0000000001080020 R09: 0000000000000002
R10: 00007fffdf003000 R11: 0000000000000000 R12: ffff880167990918
R13: 0000000000000000 R14: 00000000000002fa R15: ffff880166b6c800
 userfaultfd_zeropage fs/userfaultfd.c:1723 [inline]
 userfaultfd_ioctl+0x2949/0x6350 fs/userfaultfd.c:1820
 vfs_ioctl fs/ioctl.c:46 [inline]
 do_vfs_ioctl+0xaf0/0x2440 fs/ioctl.c:686
 SYSC_ioctl+0x1d2/0x260 fs/ioctl.c:701
 SyS_ioctl+0x54/0x80 fs/ioctl.c:692
 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x3d/0xa2
RIP: 0033:0x455279
RSP: 002b:00007f6af5423c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f6af54246d4 RCX: 0000000000455279
RDX: 0000000020000240 RSI: 00000000c020aa04 RDI: 0000000000000014
RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 000000000000033d R14: 00000000006f7e58 R15: 0000000000000001

Local variable description: ----c.i.i.i.i.i.i.i.i.i@gup_pgd_range
Variable was created at:
 gup_pgd_range+0x110/0x2e80 mm/gup.c:1702
 get_user_pages_fast+0x26e/0x760 mm/gup.c:1815
==================================================================
==================================================================
BUG: KMSAN: uninit-value in show_trace_log_lvl+0xd4d/0x1030 arch/x86/kernel/dumpstack.c:175
CPU: 1 PID: 5514 Comm: syz-executor2 Tainted: G    B            4.16.0+ #83
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14a/0x1d0 lib/dump_stack.c:53
 kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1067
 __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:676
 show_trace_log_lvl+0xd4d/0x1030 arch/x86/kernel/dumpstack.c:175
 show_stack+0xfc/0x150 arch/x86/kernel/dumpstack.c:236
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:53
 panic+0x39d/0x940 kernel/panic.c:183
 __warn+0x40f/0x580 kernel/panic.c:547
 report_bug+0x72a/0x880 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:179 [inline]
 do_error_trap+0x1aa/0x600 arch/x86/kernel/traps.c:297
 do_invalid_op+0x46/0x50 arch/x86/kernel/traps.c:316
 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:986
RIP: 0010:__mcopy_atomic mm/userfaultfd.c:413 [inline]
RIP: 0010:mfill_zeropage+0x69b/0x16e0 mm/userfaultfd.c:574
RSP: 0018:ffff88016515f9a8 EFLAGS: 00010287
RAX: ffffffff81cf322b RBX: 0000000000000000 RCX: 0000000000040000
RDX: ffffc9000256a000 RSI: 0000000000000016 RDI: 0000000000000017
RBP: ffff88016515faf0 R08: 0000000001080020 R09: 0000000000000002
R10: 00007fffdf003000 R11: 0000000000000000 R12: ffff880167990918
R13: 0000000000000000 R14: 00000000000002fa R15: ffff880166b6c800
 userfaultfd_zeropage fs/userfaultfd.c:1723 [inline]
 userfaultfd_ioctl+0x2949/0x6350 fs/userfaultfd.c:1820
 vfs_ioctl fs/ioctl.c:46 [inline]
 do_vfs_ioctl+0xaf0/0x2440 fs/ioctl.c:686
 SYSC_ioctl+0x1d2/0x260 fs/ioctl.c:701
 SyS_ioctl+0x54/0x80 fs/ioctl.c:692
 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x3d/0xa2
RIP: 0033:0x455279
RSP: 002b:00007f6af5423c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f6af54246d4 RCX: 0000000000455279
RDX: 0000000020000240 RSI: 00000000c020aa04 RDI: 0000000000000014
RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 000000000000033d R14: 00000000006f7e58 R15: 0000000000000001

Local variable description: ----c.i.i.i.i.i.i.i.i.i@gup_pgd_range
Variable was created at:
 gup_pgd_range+0x110/0x2e80 mm/gup.c:1702
 get_user_pages_fast+0x26e/0x760 mm/gup.c:1815
==================================================================
==================================================================
BUG: KMSAN: uninit-value in core_kernel_text kernel/extable.c:77 [inline]
BUG: KMSAN: uninit-value in kernel_text_address+0x248/0x3a0 kernel/extable.c:127
CPU: 1 PID: 5514 Comm: syz-executor2 Tainted: G    B            4.16.0+ #83
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14a/0x1d0 lib/dump_stack.c:53
 kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1067
 __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:676
 core_kernel_text kernel/extable.c:77 [inline]
 kernel_text_address+0x248/0x3a0 kernel/extable.c:127
 __kernel_text_address+0x34/0xe0 kernel/extable.c:107
 show_trace_log_lvl+0x954/0x1030 arch/x86/kernel/dumpstack.c:175
 show_stack+0xfc/0x150 arch/x86/kernel/dumpstack.c:236
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:53
 panic+0x39d/0x940 kernel/panic.c:183
 __warn+0x40f/0x580 kernel/panic.c:547
 report_bug+0x72a/0x880 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:179 [inline]
 do_error_trap+0x1aa/0x600 arch/x86/kernel/traps.c:297
 do_invalid_op+0x46/0x50 arch/x86/kernel/traps.c:316
 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:986
RIP: 0010:__mcopy_atomic mm/userfaultfd.c:413 [inline]
RIP: 0010:mfill_zeropage+0x69b/0x16e0 mm/userfaultfd.c:574
RSP: 0018:ffff88016515f9a8 EFLAGS: 00010287
RAX: ffffffff81cf322b RBX: 0000000000000000 RCX: 0000000000040000
RDX: ffffc9000256a000 RSI: 0000000000000016 RDI: 0000000000000017
RBP: ffff88016515faf0 R08: 0000000001080020 R09: 0000000000000002
R10: 00007fffdf003000 R11: 0000000000000000 R12: ffff880167990918
R13: 0000000000000000 R14: 00000000000002fa R15: ffff880166b6c800
 userfaultfd_zeropage fs/userfaultfd.c:1723 [inline]
 userfaultfd_ioctl+0x2949/0x6350 fs/userfaultfd.c:1820
 vfs_ioctl fs/ioctl.c:46 [inline]
 do_vfs_ioctl+0xaf0/0x2440 fs/ioctl.c:686
 SYSC_ioctl+0x1d2/0x260 fs/ioctl.c:701
 SyS_ioctl+0x54/0x80 fs/ioctl.c:692
 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x3d/0xa2
RIP: 0033:0x455279
RSP: 002b:00007f6af5423c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f6af54246d4 RCX: 0000000000455279
RDX: 0000000020000240 RSI: 00000000c020aa04 RDI: 0000000000000014
RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 000000000000033d R14: 00000000006f7e58 R15: 0000000000000001

Local variable description: ----reclaim_state.i.i.i@__alloc_pages_nodemask
Variable was created at:
 __alloc_pages_nodemask+0x160/0x5dc0 mm/page_alloc.c:4238
 alloc_pages_vma+0xcc8/0x1800 mm/mempolicy.c:2019
==================================================================
==================================================================
BUG: KMSAN: uninit-value in show_trace_log_lvl+0xd4d/0x1030 arch/x86/kernel/dumpstack.c:175
CPU: 1 PID: 5514 Comm: syz-executor2 Tainted: G    B            4.16.0+ #83
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14a/0x1d0 lib/dump_stack.c:53
 kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1067
 __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:676
 show_trace_log_lvl+0xd4d/0x1030 arch/x86/kernel/dumpstack.c:175
 show_stack+0xfc/0x150 arch/x86/kernel/dumpstack.c:236
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:53
 panic+0x39d/0x940 kernel/panic.c:183
 __warn+0x40f/0x580 kernel/panic.c:547
 report_bug+0x72a/0x880 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:179 [inline]
 do_error_trap+0x1aa/0x600 arch/x86/kernel/traps.c:297
 do_invalid_op+0x46/0x50 arch/x86/kernel/traps.c:316
 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:986
RIP: 0010:__mcopy_atomic mm/userfaultfd.c:413 [inline]
RIP: 0010:mfill_zeropage+0x69b/0x16e0 mm/userfaultfd.c:574
RSP: 0018:ffff88016515f9a8 EFLAGS: 00010287
RAX: ffffffff81cf322b RBX: 0000000000000000 RCX: 0000000000040000
RDX: ffffc9000256a000 RSI: 0000000000000016 RDI: 0000000000000017
RBP: ffff88016515faf0 R08: 0000000001080020 R09: 0000000000000002
R10: 00007fffdf003000 R11: 0000000000000000 R12: ffff880167990918
R13: 0000000000000000 R14: 00000000000002fa R15: ffff880166b6c800
 userfaultfd_zeropage fs/userfaultfd.c:1723 [inline]
 userfaultfd_ioctl+0x2949/0x6350 fs/userfaultfd.c:1820
 vfs_ioctl fs/ioctl.c:46 [inline]
 do_vfs_ioctl+0xaf0/0x2440 fs/ioctl.c:686
 SYSC_ioctl+0x1d2/0x260 fs/ioctl.c:701
 SyS_ioctl+0x54/0x80 fs/ioctl.c:692
 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x3d/0xa2
RIP: 0033:0x455279
RSP: 002b:00007f6af5423c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f6af54246d4 RCX: 0000000000455279
RDX: 0000000020000240 RSI: 00000000c020aa04 RDI: 0000000000000014
RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 000000000000033d R14: 00000000006f7e58 R15: 0000000000000001

Local variable description: ----reclaim_state.i.i.i@__alloc_pages_nodemask
Variable was created at:
 __alloc_pages_nodemask+0x160/0x5dc0 mm/page_alloc.c:4238
 alloc_pages_vma+0xcc8/0x1800 mm/mempolicy.c:2019
==================================================================
==================================================================
BUG: KMSAN: uninit-value in core_kernel_text kernel/extable.c:77 [inline]
BUG: KMSAN: uninit-value in kernel_text_address+0x248/0x3a0 kernel/extable.c:127
CPU: 1 PID: 5514 Comm: syz-executor2 Tainted: G    B            4.16.0+ #83
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14a/0x1d0 lib/dump_stack.c:53
 kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1067
 __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:676
 core_kernel_text kernel/extable.c:77 [inline]
 kernel_text_address+0x248/0x3a0 kernel/extable.c:127
 __kernel_text_address+0x34/0xe0 kernel/extable.c:107
 show_trace_log_lvl+0x954/0x1030 arch/x86/kernel/dumpstack.c:175
 show_stack+0xfc/0x150 arch/x86/kernel/dumpstack.c:236
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:53
 panic+0x39d/0x940 kernel/panic.c:183
 __warn+0x40f/0x580 kernel/panic.c:547
 report_bug+0x72a/0x880 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:179 [inline]
 do_error_trap+0x1aa/0x600 arch/x86/kernel/traps.c:297
 do_invalid_op+0x46/0x50 arch/x86/kernel/traps.c:316
 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:986
RIP: 0010:__mcopy_atomic mm/userfaultfd.c:413 [inline]
RIP: 0010:mfill_zeropage+0x69b/0x16e0 mm/userfaultfd.c:574
RSP: 0018:ffff88016515f9a8 EFLAGS: 00010287
RAX: ffffffff81cf322b RBX: 0000000000000000 RCX: 0000000000040000
RDX: ffffc9000256a000 RSI: 0000000000000016 RDI: 0000000000000017
RBP: ffff88016515faf0 R08: 0000000001080020 R09: 0000000000000002
R10: 00007fffdf003000 R11: 0000000000000000 R12: ffff880167990918
R13: 0000000000000000 R14: 00000000000002fa R15: ffff880166b6c800
 userfaultfd_zeropage fs/userfaultfd.c:1723 [inline]
 userfaultfd_ioctl+0x2949/0x6350 fs/userfaultfd.c:1820
 vfs_ioctl fs/ioctl.c:46 [inline]
 do_vfs_ioctl+0xaf0/0x2440 fs/ioctl.c:686
 SYSC_ioctl+0x1d2/0x260 fs/ioctl.c:701
 SyS_ioctl+0x54/0x80 fs/ioctl.c:692
 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x3d/0xa2
RIP: 0033:0x455279
RSP: 002b:00007f6af5423c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f6af54246d4 RCX: 0000000000455279
RDX: 0000000020000240 RSI: 00000000c020aa04 RDI: 0000000000000014
RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 000000000000033d R14: 00000000006f7e58 R15: 0000000000000001

Local variable description: ----oc.i.i@__alloc_pages_nodemask
Variable was created at:
 __alloc_pages_nodemask+0x10f/0x5dc0 mm/page_alloc.c:4238
 alloc_pages_vma+0xcc8/0x1800 mm/mempolicy.c:2019
==================================================================
==================================================================
BUG: KMSAN: uninit-value in show_trace_log_lvl+0xd4d/0x1030 arch/x86/kernel/dumpstack.c:175
CPU: 1 PID: 5514 Comm: syz-executor2 Tainted: G    B            4.16.0+ #83
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14a/0x1d0 lib/dump_stack.c:53
 kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1067
 __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:676
 show_trace_log_lvl+0xd4d/0x1030 arch/x86/kernel/dumpstack.c:175
 show_stack+0xfc/0x150 arch/x86/kernel/dumpstack.c:236
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:53
 panic+0x39d/0x940 kernel/panic.c:183
 __warn+0x40f/0x580 kernel/panic.c:547
 report_bug+0x72a/0x880 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:179 [inline]
 do_error_trap+0x1aa/0x600 arch/x86/kernel/traps.c:297
 do_invalid_op+0x46/0x50 arch/x86/kernel/traps.c:316
 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:986
RIP: 0010:__mcopy_atomic mm/userfaultfd.c:413 [inline]
RIP: 0010:mfill_zeropage+0x69b/0x16e0 mm/userfaultfd.c:574
RSP: 0018:ffff88016515f9a8 EFLAGS: 00010287
RAX: ffffffff81cf322b RBX: 0000000000000000 RCX: 0000000000040000
RDX: ffffc9000256a000 RSI: 0000000000000016 RDI: 0000000000000017
RBP: ffff88016515faf0 R08: 0000000001080020 R09: 0000000000000002
R10: 00007fffdf003000 R11: 0000000000000000 R12: ffff880167990918
R13: 0000000000000000 R14: 00000000000002fa R15: ffff880166b6c800
 userfaultfd_zeropage fs/userfaultfd.c:1723 [inline]
 userfaultfd_ioctl+0x2949/0x6350 fs/userfaultfd.c:1820
 vfs_ioctl fs/ioctl.c:46 [inline]
 do_vfs_ioctl+0xaf0/0x2440 fs/ioctl.c:686
 SYSC_ioctl+0x1d2/0x260 fs/ioctl.c:701
 SyS_ioctl+0x54/0x80 fs/ioctl.c:692
 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x3d/0xa2
RIP: 0033:0x455279
RSP: 002b:00007f6af5423c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f6af54246d4 RCX: 0000000000455279
RDX: 0000000020000240 RSI: 00000000c020aa04 RDI: 0000000000000014
RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 000000000000033d R14: 00000000006f7e58 R15: 0000000000000001

Local variable description: ----oc.i.i@__alloc_pages_nodemask
Variable was created at:
 __alloc_pages_nodemask+0x10f/0x5dc0 mm/page_alloc.c:4238
 alloc_pages_vma+0xcc8/0x1800 mm/mempolicy.c:2019
==================================================================
==================================================================
BUG: KMSAN: uninit-value in core_kernel_text kernel/extable.c:77 [inline]
BUG: KMSAN: uninit-value in kernel_text_address+0x248/0x3a0 kernel/extable.c:127
CPU: 1 PID: 5514 Comm: syz-executor2 Tainted: G    B            4.16.0+ #83
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14a/0x1d0 lib/dump_stack.c:53
 kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1067
 __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:676
 core_kernel_text kernel/extable.c:77 [inline]
 kernel_text_address+0x248/0x3a0 kernel/extable.c:127
 __kernel_text_address+0x34/0xe0 kernel/extable.c:107
 show_trace_log_lvl+0x954/0x1030 arch/x86/kernel/dumpstack.c:175
 show_stack+0xfc/0x150 arch/x86/kernel/dumpstack.c:236
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:53
 panic+0x39d/0x940 kernel/panic.c:183
 __warn+0x40f/0x580 kernel/panic.c:547
 report_bug+0x72a/0x880 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:179 [inline]
 do_error_trap+0x1aa/0x600 arch/x86/kernel/traps.c:297
 do_invalid_op+0x46/0x50 arch/x86/kernel/traps.c:316
 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:986
RIP: 0010:__mcopy_atomic mm/userfaultfd.c:413 [inline]
RIP: 0010:mfill_zeropage+0x69b/0x16e0 mm/userfaultfd.c:574
RSP: 0018:ffff88016515f9a8 EFLAGS: 00010287
RAX: ffffffff81cf322b RBX: 0000000000000000 RCX: 0000000000040000
RDX: ffffc9000256a000 RSI: 0000000000000016 RDI: 0000000000000017
RBP: ffff88016515faf0 R08: 0000000001080020 R09: 0000000000000002
R10: 00007fffdf003000 R11: 0000000000000000 R12: ffff880167990918
R13: 0000000000000000 R14: 00000000000002fa R15: ffff880166b6c800
 userfaultfd_zeropage fs/userfaultfd.c:1723 [inline]
 userfaultfd_ioctl+0x2949/0x6350 fs/userfaultfd.c:1820
 vfs_ioctl fs/ioctl.c:46 [inline]
 do_vfs_ioctl+0xaf0/0x2440 fs/ioctl.c:686
 SYSC_ioctl+0x1d2/0x260 fs/ioctl.c:701
 SyS_ioctl+0x54/0x80 fs/ioctl.c:692
 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x3d/0xa2
RIP: 0033:0x455279
RSP: 002b:00007f6af5423c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f6af54246d4 RCX: 0000000000455279
RDX: 0000000020000240 RSI: 00000000c020aa04 RDI: 0000000000000014
RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 000000000000033d R14: 00000000006f7e58 R15: 0000000000000001

Local variable description: ----oc.i.i@__alloc_pages_nodemask
Variable was created at:
 __alloc_pages_nodemask+0x10f/0x5dc0 mm/page_alloc.c:4238
 alloc_pages_vma+0xcc8/0x1800 mm/mempolicy.c:2019
==================================================================
==================================================================
BUG: KMSAN: uninit-value in show_trace_log_lvl+0xd4d/0x1030 arch/x86/kernel/dumpstack.c:175
CPU: 1 PID: 5514 Comm: syz-executor2 Tainted: G    B            4.16.0+ #83
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14a/0x1d0 lib/dump_stack.c:53
 kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1067
 __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:676
 show_trace_log_lvl+0xd4d/0x1030 arch/x86/kernel/dumpstack.c:175
 show_stack+0xfc/0x150 arch/x86/kernel/dumpstack.c:236
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:53
 panic+0x39d/0x940 kernel/panic.c:183
 __warn+0x40f/0x580 kernel/panic.c:547
 report_bug+0x72a/0x880 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:179 [inline]
 do_error_trap+0x1aa/0x600 arch/x86/kernel/traps.c:297
 do_invalid_op+0x46/0x50 arch/x86/kernel/traps.c:316
 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:986
RIP: 0010:__mcopy_atomic mm/userfaultfd.c:413 [inline]
RIP: 0010:mfill_zeropage+0x69b/0x16e0 mm/userfaultfd.c:574
RSP: 0018:ffff88016515f9a8 EFLAGS: 00010287
RAX: ffffffff81cf322b RBX: 0000000000000000 RCX: 0000000000040000
RDX: ffffc9000256a000 RSI: 0000000000000016 RDI: 0000000000000017
RBP: ffff88016515faf0 R08: 0000000001080020 R09: 0000000000000002
R10: 00007fffdf003000 R11: 0000000000000000 R12: ffff880167990918
R13: 0000000000000000 R14: 00000000000002fa R15: ffff880166b6c800
 userfaultfd_zeropage fs/userfaultfd.c:1723 [inline]
 userfaultfd_ioctl+0x2949/0x6350 fs/userfaultfd.c:1820
 vfs_ioctl fs/ioctl.c:46 [inline]
 do_vfs_ioctl+0xaf0/0x2440 fs/ioctl.c:686
 SYSC_ioctl+0x1d2/0x260 fs/ioctl.c:701
 SyS_ioctl+0x54/0x80 fs/ioctl.c:692
 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x3d/0xa2
RIP: 0033:0x455279
RSP: 002b:00007f6af5423c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f6af54246d4 RCX: 0000000000455279
RDX: 0000000020000240 RSI: 00000000c020aa04 RDI: 0000000000000014
RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 000000000000033d R14: 00000000006f7e58 R15: 0000000000000001

Local variable description: ----oc.i.i@__alloc_pages_nodemask
Variable was created at:
 __alloc_pages_nodemask+0x10f/0x5dc0 mm/page_alloc.c:4238
 alloc_pages_vma+0xcc8/0x1800 mm/mempolicy.c:2019
==================================================================
==================================================================
BUG: KMSAN: uninit-value in core_kernel_text kernel/extable.c:77 [inline]
BUG: KMSAN: uninit-value in kernel_text_address+0x248/0x3a0 kernel/extable.c:127
CPU: 1 PID: 5514 Comm: syz-executor2 Tainted: G    B            4.16.0+ #83
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14a/0x1d0 lib/dump_stack.c:53
 kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1067
 __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:676
 core_kernel_text kernel/extable.c:77 [inline]
 kernel_text_address+0x248/0x3a0 kernel/extable.c:127
 __kernel_text_address+0x34/0xe0 kernel/extable.c:107
 show_trace_log_lvl+0x954/0x1030 arch/x86/kernel/dumpstack.c:175
 show_stack+0xfc/0x150 arch/x86/kernel/dumpstack.c:236
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:53
 panic+0x39d/0x940 kernel/panic.c:183
 __warn+0x40f/0x580 kernel/panic.c:547
 report_bug+0x72a/0x880 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:179 [inline]
 do_error_trap+0x1aa/0x600 arch/x86/kernel/traps.c:297
 do_invalid_op+0x46/0x50 arch/x86/kernel/traps.c:316
 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:986
RIP: 0010:__mcopy_atomic mm/userfaultfd.c:413 [inline]
RIP: 0010:mfill_zeropage+0x69b/0x16e0 mm/userfaultfd.c:574
RSP: 0018:ffff88016515f9a8 EFLAGS: 00010287
RAX: ffffffff81cf322b RBX: 0000000000000000 RCX: 0000000000040000
RDX: ffffc9000256a000 RSI: 0000000000000016 RDI: 0000000000000017
RBP: ffff88016515faf0 R08: 0000000001080020 R09: 0000000000000002
R10: 00007fffdf003000 R11: 0000000000000000 R12: ffff880167990918
R13: 0000000000000000 R14: 00000000000002fa R15: ffff880166b6c800
 userfaultfd_zeropage fs/userfaultfd.c:1723 [inline]
 userfaultfd_ioctl+0x2949/0x6350 fs/userfaultfd.c:1820
 vfs_ioctl fs/ioctl.c:46 [inline]
 do_vfs_ioctl+0xaf0/0x2440 fs/ioctl.c:686
 SYSC_ioctl+0x1d2/0x260 fs/ioctl.c:701
 SyS_ioctl+0x54/0x80 fs/ioctl.c:692
 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x3d/0xa2
RIP: 0033:0x455279
RSP: 002b:00007f6af5423c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f6af54246d4 RCX: 0000000000455279
RDX: 0000000020000240 RSI: 00000000c020aa04 RDI: 0000000000000014
RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 000000000000033d R14: 00000000006f7e58 R15: 0000000000000001

Local variable description: ----oc.i.i@__alloc_pages_nodemask
Variable was created at:
 __alloc_pages_nodemask+0x10f/0x5dc0 mm/page_alloc.c:4238
 alloc_pages_vma+0xcc8/0x1800 mm/mempolicy.c:2019
==================================================================
==================================================================
BUG: KMSAN: uninit-value in show_trace_log_lvl+0xd4d/0x1030 arch/x86/kernel/dumpstack.c:175
CPU: 1 PID: 5514 Comm: syz-executor2 Tainted: G    B            4.16.0+ #83
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14a/0x1d0 lib/dump_stack.c:53
 kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1067
 __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:676
 show_trace_log_lvl+0xd4d/0x1030 arch/x86/kernel/dumpstack.c:175
 show_stack+0xfc/0x150 arch/x86/kernel/dumpstack.c:236
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:53
 panic+0x39d/0x940 kernel/panic.c:183
 __warn+0x40f/0x580 kernel/panic.c:547
 report_bug+0x72a/0x880 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:179 [inline]
 do_error_trap+0x1aa/0x600 arch/x86/kernel/traps.c:297
 do_invalid_op+0x46/0x50 arch/x86/kernel/traps.c:316
 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:986
RIP: 0010:__mcopy_atomic mm/userfaultfd.c:413 [inline]
RIP: 0010:mfill_zeropage+0x69b/0x16e0 mm/userfaultfd.c:574
RSP: 0018:ffff88016515f9a8 EFLAGS: 00010287
RAX: ffffffff81cf322b RBX: 0000000000000000 RCX: 0000000000040000
RDX: ffffc9000256a000 RSI: 0000000000000016 RDI: 0000000000000017
RBP: ffff88016515faf0 R08: 0000000001080020 R09: 0000000000000002
R10: 00007fffdf003000 R11: 0000000000000000 R12: ffff880167990918
R13: 0000000000000000 R14: 00000000000002fa R15: ffff880166b6c800
 userfaultfd_zeropage fs/userfaultfd.c:1723 [inline]
 userfaultfd_ioctl+0x2949/0x6350 fs/userfaultfd.c:1820
 vfs_ioctl fs/ioctl.c:46 [inline]
 do_vfs_ioctl+0xaf0/0x2440 fs/ioctl.c:686
 SYSC_ioctl+0x1d2/0x260 fs/ioctl.c:701
 SyS_ioctl+0x54/0x80 fs/ioctl.c:692
 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x3d/0xa2
RIP: 0033:0x455279
RSP: 002b:00007f6af5423c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f6af54246d4 RCX: 0000000000455279
RDX: 0000000020000240 RSI: 00000000c020aa04 RDI: 0000000000000014
RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 000000000000033d R14: 00000000006f7e58 R15: 0000000000000001

Local variable description: ----oc.i.i@__alloc_pages_nodemask
Variable was created at:
 __alloc_pages_nodemask+0x10f/0x5dc0 mm/page_alloc.c:4238
 alloc_pages_vma+0xcc8/0x1800 mm/mempolicy.c:2019
==================================================================
==================================================================
BUG: KMSAN: uninit-value in core_kernel_text kernel/extable.c:77 [inline]
BUG: KMSAN: uninit-value in kernel_text_address+0x248/0x3a0 kernel/extable.c:127
CPU: 1 PID: 5514 Comm: syz-executor2 Tainted: G    B            4.16.0+ #83
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14a/0x1d0 lib/dump_stack.c:53
 kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1067
 __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:676
 core_kernel_text kernel/extable.c:77 [inline]
 kernel_text_address+0x248/0x3a0 kernel/extable.c:127
 __kernel_text_address+0x34/0xe0 kernel/extable.c:107
 show_trace_log_lvl+0x954/0x1030 arch/x86/kernel/dumpstack.c:175
 show_stack+0xfc/0x150 arch/x86/kernel/dumpstack.c:236
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:53
 panic+0x39d/0x940 kernel/panic.c:183
 __warn+0x40f/0x580 kernel/panic.c:547
 report_bug+0x72a/0x880 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:179 [inline]
 do_error_trap+0x1aa/0x600 arch/x86/kernel/traps.c:297
 do_invalid_op+0x46/0x50 arch/x86/kernel/traps.c:316
 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:986
RIP: 0010:__mcopy_atomic mm/userfaultfd.c:413 [inline]
RIP: 0010:mfill_zeropage+0x69b/0x16e0 mm/userfaultfd.c:574
RSP: 0018:ffff88016515f9a8 EFLAGS: 00010287
RAX: ffffffff81cf322b RBX: 0000000000000000 RCX: 0000000000040000
RDX: ffffc9000256a000 RSI: 0000000000000016 RDI: 0000000000000017
RBP: ffff88016515faf0 R08: 0000000001080020 R09: 0000000000000002
R10: 00007fffdf003000 R11: 0000000000000000 R12: ffff880167990918
R13: 0000000000000000 R14: 00000000000002fa R15: ffff880166b6c800
 userfaultfd_zeropage fs/userfaultfd.c:1723 [inline]
 userfaultfd_ioctl+0x2949/0x6350 fs/userfaultfd.c:1820
 vfs_ioctl fs/ioctl.c:46 [inline]
 do_vfs_ioctl+0xaf0/0x2440 fs/ioctl.c:686
 SYSC_ioctl+0x1d2/0x260 fs/ioctl.c:701
 SyS_ioctl+0x54/0x80 fs/ioctl.c:692
 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x3d/0xa2
RIP: 0033:0x455279
RSP: 002b:00007f6af5423c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f6af54246d4 RCX: 0000000000455279
RDX: 0000000020000240 RSI: 00000000c020aa04 RDI: 0000000000000014
RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 000000000000033d R14: 00000000006f7e58 R15: 0000000000000001

Local variable description: ----oc.i.i@__alloc_pages_nodemask
Variable was created at:
 __alloc_pages_nodemask+0x10f/0x5dc0 mm/page_alloc.c:4238
 alloc_pages_vma+0xcc8/0x1800 mm/mempolicy.c:2019
==================================================================
==================================================================
BUG: KMSAN: uninit-value in show_trace_log_lvl+0xd4d/0x1030 arch/x86/kernel/dumpstack.c:175
CPU: 1 PID: 5514 Comm: syz-executor2 Tainted: G    B            4.16.0+ #83
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14a/0x1d0 lib/dump_stack.c:53
 kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1067
 __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:676
 show_trace_log_lvl+0xd4d/0x1030 arch/x86/kernel/dumpstack.c:175
 show_stack+0xfc/0x150 arch/x86/kernel/dumpstack.c:236
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:53
 panic+0x39d/0x940 kernel/panic.c:183
 __warn+0x40f/0x580 kernel/panic.c:547
 report_bug+0x72a/0x880 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:179 [inline]
 do_error_trap+0x1aa/0x600 arch/x86/kernel/traps.c:297
 do_invalid_op+0x46/0x50 arch/x86/kernel/traps.c:316
 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:986
RIP: 0010:__mcopy_atomic mm/userfaultfd.c:413 [inline]
RIP: 0010:mfill_zeropage+0x69b/0x16e0 mm/userfaultfd.c:574
RSP: 0018:ffff88016515f9a8 EFLAGS: 00010287
RAX: ffffffff81cf322b RBX: 0000000000000000 RCX: 0000000000040000
RDX: ffffc9000256a000 RSI: 0000000000000016 RDI: 0000000000000017
RBP: ffff88016515faf0 R08: 0000000001080020 R09: 0000000000000002
R10: 00007fffdf003000 R11: 0000000000000000 R12: ffff880167990918
R13: 0000000000000000 R14: 00000000000002fa R15: ffff880166b6c800
 userfaultfd_zeropage fs/userfaultfd.c:1723 [inline]
 userfaultfd_ioctl+0x2949/0x6350 fs/userfaultfd.c:1820
 vfs_ioctl fs/ioctl.c:46 [inline]
 do_vfs_ioctl+0xaf0/0x2440 fs/ioctl.c:686
 SYSC_ioctl+0x1d2/0x260 fs/ioctl.c:701
 SyS_ioctl+0x54/0x80 fs/ioctl.c:692
 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x3d/0xa2
RIP: 0033:0x455279
RSP: 002b:00007f6af5423c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f6af54246d4 RCX: 0000000000455279
RDX: 0000000020000240 RSI: 00000000c020aa04 RDI: 0000000000000014
RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 000000000000033d R14: 00000000006f7e58 R15: 0000000000000001

Local variable description: ----oc.i.i@__alloc_pages_nodemask
Variable was created at:
 __alloc_pages_nodemask+0x10f/0x5dc0 mm/page_alloc.c:4238
 alloc_pages_vma+0xcc8/0x1800 mm/mempolicy.c:2019
==================================================================
==================================================================
BUG: KMSAN: uninit-value in core_kernel_text kernel/extable.c:77 [inline]
BUG: KMSAN: uninit-value in kernel_text_address+0x248/0x3a0 kernel/extable.c:127
CPU: 1 PID: 5514 Comm: syz-executor2 Tainted: G    B            4.16.0+ #83
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14a/0x1d0 lib/dump_stack.c:53
 kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1067
 __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:676
 core_kernel_text kernel/extable.c:77 [inline]
 kernel_text_address+0x248/0x3a0 kernel/extable.c:127
 __kernel_text_address+0x34/0xe0 kernel/extable.c:107
 show_trace_log_lvl+0x954/0x1030 arch/x86/kernel/dumpstack.c:175
 show_stack+0xfc/0x150 arch/x86/kernel/dumpstack.c:236
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:53
 panic+0x39d/0x940 kernel/panic.c:183
 __warn+0x40f/0x580 kernel/panic.c:547
 report_bug+0x72a/0x880 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:179 [inline]
 do_error_trap+0x1aa/0x600 arch/x86/kernel/traps.c:297
 do_invalid_op+0x46/0x50 arch/x86/kernel/traps.c:316
 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:986
RIP: 0010:__mcopy_atomic mm/userfaultfd.c:413 [inline]
RIP: 0010:mfill_zeropage+0x69b/0x16e0 mm/userfaultfd.c:574
RSP: 0018:ffff88016515f9a8 EFLAGS: 00010287
RAX: ffffffff81cf322b RBX: 0000000000000000 RCX: 0000000000040000
RDX: ffffc9000256a000 RSI: 0000000000000016 RDI: 0000000000000017
RBP: ffff88016515faf0 R08: 0000000001080020 R09: 0000000000000002
R10: 00007fffdf003000 R11: 0000000000000000 R12: ffff880167990918
R13: 0000000000000000 R14: 00000000000002fa R15: ffff880166b6c800
 userfaultfd_zeropage fs/userfaultfd.c:1723 [inline]
 userfaultfd_ioctl+0x2949/0x6350 fs/userfaultfd.c:1820
 vfs_ioctl fs/ioctl.c:46 [inline]
 do_vfs_ioctl+0xaf0/0x2440 fs/ioctl.c:686
 SYSC_ioctl+0x1d2/0x260 fs/ioctl.c:701
 SyS_ioctl+0x54/0x80 fs/ioctl.c:692
 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x3d/0xa2
RIP: 0033:0x455279
RSP: 002b:00007f6af5423c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f6af54246d4 RCX: 0000000000455279
RDX: 0000000020000240 RSI: 00000000c020aa04 RDI: 0000000000000014
RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 000000000000033d R14: 00000000006f7e58 R15: 0000000000000001

Local variable description: ----oc.i.i@__alloc_pages_nodemask
Variable was created at:
 __alloc_pages_nodemask+0x10f/0x5dc0 mm/page_alloc.c:4238
 alloc_pages_vma+0xcc8/0x1800 mm/mempolicy.c:2019
==================================================================
==================================================================
BUG: KMSAN: uninit-value in show_trace_log_lvl+0xd4d/0x1030 arch/x86/kernel/dumpstack.c:175
CPU: 1 PID: 5514 Comm: syz-executor2 Tainted: G    B            4.16.0+ #83
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14a/0x1d0 lib/dump_stack.c:53
 kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1067
 __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:676
 show_trace_log_lvl+0xd4d/0x1030 arch/x86/kernel/dumpstack.c:175
 show_stack+0xfc/0x150 arch/x86/kernel/dumpstack.c:236
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:53
 panic+0x39d/0x940 kernel/panic.c:183
 __warn+0x40f/0x580 kernel/panic.c:547
 report_bug+0x72a/0x880 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:179 [inline]
 do_error_trap+0x1aa/0x600 arch/x86/kernel/traps.c:297
 do_invalid_op+0x46/0x50 arch/x86/kernel/traps.c:316
 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:986
RIP: 0010:__mcopy_atomic mm/userfaultfd.c:413 [inline]
RIP: 0010:mfill_zeropage+0x69b/0x16e0 mm/userfaultfd.c:574
RSP: 0018:ffff88016515f9a8 EFLAGS: 00010287
RAX: ffffffff81cf322b RBX: 0000000000000000 RCX: 0000000000040000
RDX: ffffc9000256a000 RSI: 0000000000000016 RDI: 0000000000000017
RBP: ffff88016515faf0 R08: 0000000001080020 R09: 0000000000000002
R10: 00007fffdf003000 R11: 0000000000000000 R12: ffff880167990918
R13: 0000000000000000 R14: 00000000000002fa R15: ffff880166b6c800
 userfaultfd_zeropage fs/userfaultfd.c:1723 [inline]
 userfaultfd_ioctl+0x2949/0x6350 fs/userfaultfd.c:1820
 vfs_ioctl fs/ioctl.c:46 [inline]
 do_vfs_ioctl+0xaf0/0x2440 fs/ioctl.c:686
 SYSC_ioctl+0x1d2/0x260 fs/ioctl.c:701
 SyS_ioctl+0x54/0x80 fs/ioctl.c:692
 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x3d/0xa2
RIP: 0033:0x455279
RSP: 002b:00007f6af5423c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f6af54246d4 RCX: 0000000000455279
RDX: 0000000020000240 RSI: 00000000c020aa04 RDI: 0000000000000014
RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 000000000000033d R14: 00000000006f7e58 R15: 0000000000000001

Local variable description: ----oc.i.i@__alloc_pages_nodemask
Variable was created at:
 __alloc_pages_nodemask+0x10f/0x5dc0 mm/page_alloc.c:4238
 alloc_pages_vma+0xcc8/0x1800 mm/mempolicy.c:2019
==================================================================
==================================================================
BUG: KMSAN: uninit-value in core_kernel_text kernel/extable.c:77 [inline]
BUG: KMSAN: uninit-value in kernel_text_address+0x248/0x3a0 kernel/extable.c:127
CPU: 1 PID: 5514 Comm: syz-executor2 Tainted: G    B            4.16.0+ #83
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14a/0x1d0 lib/dump_stack.c:53
 kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1067
 __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:676
 core_kernel_text kernel/extable.c:77 [inline]
 kernel_text_address+0x248/0x3a0 kernel/extable.c:127
 __kernel_text_address+0x34/0xe0 kernel/extable.c:107
 show_trace_log_lvl+0x954/0x1030 arch/x86/kernel/dumpstack.c:175
 show_stack+0xfc/0x150 arch/x86/kernel/dumpstack.c:236
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:53
 panic+0x39d/0x940 kernel/panic.c:183
 __warn+0x40f/0x580 kernel/panic.c:547
 report_bug+0x72a/0x880 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:179 [inline]
 do_error_trap+0x1aa/0x600 arch/x86/kernel/traps.c:297
 do_invalid_op+0x46/0x50 arch/x86/kernel/traps.c:316
 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:986
RIP: 0010:__mcopy_atomic mm/userfaultfd.c:413 [inline]
RIP: 0010:mfill_zeropage+0x69b/0x16e0 mm/userfaultfd.c:574
RSP: 0018:ffff88016515f9a8 EFLAGS: 00010287
RAX: ffffffff81cf322b RBX: 0000000000000000 RCX: 0000000000040000
RDX: ffffc9000256a000 RSI: 0000000000000016 RDI: 0000000000000017
RBP: ffff88016515faf0 R08: 0000000001080020 R09: 0000000000000002
R10: 00007fffdf003000 R11: 0000000000000000 R12: ffff880167990918
R13: 0000000000000000 R14: 00000000000002fa R15: ffff880166b6c800
 userfaultfd_zeropage fs/userfaultfd.c:1723 [inline]
 userfaultfd_ioctl+0x2949/0x6350 fs/userfaultfd.c:1820
 vfs_ioctl fs/ioctl.c:46 [inline]
 do_vfs_ioctl+0xaf0/0x2440 fs/ioctl.c:686
 SYSC_ioctl+0x1d2/0x260 fs/ioctl.c:701
 SyS_ioctl+0x54/0x80 fs/ioctl.c:692
 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x3d/0xa2
RIP: 0033:0x455279
RSP: 002b:00007f6af5423c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f6af54246d4 RCX: 0000000000455279
RDX: 0000000020000240 RSI: 00000000c020aa04 RDI: 0000000000000014
RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 000000000000033d R14: 00000000006f7e58 R15: 0000000000000001

Local variable description: ----rf@__schedule
Variable was created at:
 __schedule+0x39/0x730 kernel/sched/core.c:3356
 schedule+0x1cc/0x2f0 kernel/sched/core.c:3505
==================================================================
 fixup_bug arch/x86/kernel/traps.c:179 [inline]
 do_error_trap+0x1aa/0x600 arch/x86/kernel/traps.c:297
==================================================================
BUG: KMSAN: uninit-value in show_trace_log_lvl+0xda4/0x1030 arch/x86/kernel/dumpstack.c:203
CPU: 1 PID: 5514 Comm: syz-executor2 Tainted: G    B            4.16.0+ #83
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14a/0x1d0 lib/dump_stack.c:53
 kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1067
 __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:676
 show_trace_log_lvl+0xda4/0x1030 arch/x86/kernel/dumpstack.c:203
 show_stack+0xfc/0x150 arch/x86/kernel/dumpstack.c:236
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:53
 panic+0x39d/0x940 kernel/panic.c:183
 __warn+0x40f/0x580 kernel/panic.c:547
 report_bug+0x72a/0x880 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:179 [inline]
 do_error_trap+0x1aa/0x600 arch/x86/kernel/traps.c:297
 do_invalid_op+0x46/0x50 arch/x86/kernel/traps.c:316
 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:986
RIP: 0010:__mcopy_atomic mm/userfaultfd.c:413 [inline]
RIP: 0010:mfill_zeropage+0x69b/0x16e0 mm/userfaultfd.c:574
RSP: 0018:ffff88016515f9a8 EFLAGS: 00010287
RAX: ffffffff81cf322b RBX: 0000000000000000 RCX: 0000000000040000
RDX: ffffc9000256a000 RSI: 0000000000000016 RDI: 0000000000000017
RBP: ffff88016515faf0 R08: 0000000001080020 R09: 0000000000000002
R10: 00007fffdf003000 R11: 0000000000000000 R12: ffff880167990918
R13: 0000000000000000 R14: 00000000000002fa R15: ffff880166b6c800
 userfaultfd_zeropage fs/userfaultfd.c:1723 [inline]
 userfaultfd_ioctl+0x2949/0x6350 fs/userfaultfd.c:1820
 vfs_ioctl fs/ioctl.c:46 [inline]
 do_vfs_ioctl+0xaf0/0x2440 fs/ioctl.c:686
 SYSC_ioctl+0x1d2/0x260 fs/ioctl.c:701
 SyS_ioctl+0x54/0x80 fs/ioctl.c:692
 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x3d/0xa2
RIP: 0033:0x455279
RSP: 002b:00007f6af5423c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f6af54246d4 RCX: 0000000000455279
RDX: 0000000020000240 RSI: 00000000c020aa04 RDI: 0000000000000014
RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 000000000000033d R14: 00000000006f7e58 R15: 0000000000000001

Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:278 [inline]
 kmsan_save_stack mm/kmsan/kmsan.c:293 [inline]
 kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:684
 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:521
 update_stack_state+0x9e2/0xa40 arch/x86/kernel/unwind_frame.c:261
 unwind_next_frame+0x618/0xe50 arch/x86/kernel/unwind_frame.c:329
 show_trace_log_lvl+0xb49/0x1030 arch/x86/kernel/dumpstack.c:212
 show_stack+0xfc/0x150 arch/x86/kernel/dumpstack.c:236
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:53
 panic+0x39d/0x940 kernel/panic.c:183
 __warn+0x40f/0x580 kernel/panic.c:547
 report_bug+0x72a/0x880 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:179 [inline]
 do_error_trap+0x1aa/0x600 arch/x86/kernel/traps.c:297
 do_invalid_op+0x46/0x50 arch/x86/kernel/traps.c:316
 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:986
 __mcopy_atomic mm/userfaultfd.c:413 [inline]
 mfill_zeropage+0x69b/0x16e0 mm/userfaultfd.c:574
 userfaultfd_zeropage fs/userfaultfd.c:1723 [inline]
 userfaultfd_ioctl+0x2949/0x6350 fs/userfaultfd.c:1820
 vfs_ioctl fs/ioctl.c:46 [inline]
 do_vfs_ioctl+0xaf0/0x2440 fs/ioctl.c:686
 SYSC_ioctl+0x1d2/0x260 fs/ioctl.c:701
 SyS_ioctl+0x54/0x80 fs/ioctl.c:692
 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x3d/0xa2
Local variable description: ----oldbit.i.i.i@pick_next_task_fair
Variable was created at:
 pick_next_task_fair+0x63/0x1f70 kernel/sched/fair.c:6642
 pick_next_task+0x1b4/0x410 kernel/sched/core.c:3290
==================================================================
==================================================================
BUG: KMSAN: uninit-value in is_last_ftrace_frame arch/x86/kernel/unwind_frame.c:164 [inline]
BUG: KMSAN: uninit-value in is_last_task_frame arch/x86/kernel/unwind_frame.c:171 [inline]
BUG: KMSAN: uninit-value in unwind_next_frame+0xb2c/0xe50 arch/x86/kernel/unwind_frame.c:294
CPU: 1 PID: 5514 Comm: syz-executor2 Tainted: G    B            4.16.0+ #83
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14a/0x1d0 lib/dump_stack.c:53
 kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1067
 __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:676
 is_last_ftrace_frame arch/x86/kernel/unwind_frame.c:164 [inline]
 is_last_task_frame arch/x86/kernel/unwind_frame.c:171 [inline]
 unwind_next_frame+0xb2c/0xe50 arch/x86/kernel/unwind_frame.c:294
 show_trace_log_lvl+0xb49/0x1030 arch/x86/kernel/dumpstack.c:212
 show_stack+0xfc/0x150 arch/x86/kernel/dumpstack.c:236
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:53
 panic+0x39d/0x940 kernel/panic.c:183
 __warn+0x40f/0x580 kernel/panic.c:547
 report_bug+0x72a/0x880 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:179 [inline]
 do_error_trap+0x1aa/0x600 arch/x86/kernel/traps.c:297
 do_invalid_op+0x46/0x50 arch/x86/kernel/traps.c:316
 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:986
RIP: 0010:__mcopy_atomic mm/userfaultfd.c:413 [inline]
RIP: 0010:mfill_zeropage+0x69b/0x16e0 mm/userfaultfd.c:574
RSP: 0018:ffff88016515f9a8 EFLAGS: 00010287
RAX: ffffffff81cf322b RBX: 0000000000000000 RCX: 0000000000040000
RDX: ffffc9000256a000 RSI: 0000000000000016 RDI: 0000000000000017
RBP: ffff88016515faf0 R08: 0000000001080020 R09: 0000000000000002
R10: 00007fffdf003000 R11: 0000000000000000 R12: ffff880167990918
R13: 0000000000000000 R14: 00000000000002fa R15: ffff880166b6c800
 userfaultfd_zeropage fs/userfaultfd.c:1723 [inline]
 userfaultfd_ioctl+0x2949/0x6350 fs/userfaultfd.c:1820
 vfs_ioctl fs/ioctl.c:46 [inline]
 do_vfs_ioctl+0xaf0/0x2440 fs/ioctl.c:686
 SYSC_ioctl+0x1d2/0x260 fs/ioctl.c:701
 SyS_ioctl+0x54/0x80 fs/ioctl.c:692
 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x3d/0xa2
RIP: 0033:0x455279
RSP: 002b:00007f6af5423c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f6af54246d4 RCX: 0000000000455279
RDX: 0000000020000240 RSI: 00000000c020aa04 RDI: 0000000000000014
RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 000000000000033d R14: 00000000006f7e58 R15: 0000000000000001

Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:278 [inline]
 kmsan_save_stack mm/kmsan/kmsan.c:293 [inline]
 kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:684
 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:521
 update_stack_state+0x9e2/0xa40 arch/x86/kernel/unwind_frame.c:261
 unwind_next_frame+0x618/0xe50 arch/x86/kernel/unwind_frame.c:329
 show_trace_log_lvl+0xb49/0x1030 arch/x86/kernel/dumpstack.c:212
 show_stack+0xfc/0x150 arch/x86/kernel/dumpstack.c:236
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:53
 panic+0x39d/0x940 kernel/panic.c:183
 __warn+0x40f/0x580 kernel/panic.c:547
 report_bug+0x72a/0x880 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:179 [inline]
 do_error_trap+0x1aa/0x600 arch/x86/kernel/traps.c:297
 do_invalid_op+0x46/0x50 arch/x86/kernel/traps.c:316
 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:986
 __mcopy_atomic mm/userfaultfd.c:413 [inline]
 mfill_zeropage+0x69b/0x16e0 mm/userfaultfd.c:574
 userfaultfd_zeropage fs/userfaultfd.c:1723 [inline]
 userfaultfd_ioctl+0x2949/0x6350 fs/userfaultfd.c:1820
 vfs_ioctl fs/ioctl.c:46 [inline]
 do_vfs_ioctl+0xaf0/0x2440 fs/ioctl.c:686
 SYSC_ioctl+0x1d2/0x260 fs/ioctl.c:701
 SyS_ioctl+0x54/0x80 fs/ioctl.c:692
 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x3d/0xa2
Local variable description: ----oldbit.i.i.i@pick_next_task_fair
Variable was created at:
 pick_next_task_fair+0x63/0x1f70 kernel/sched/fair.c:6642
 pick_next_task+0x1b4/0x410 kernel/sched/core.c:3290
==================================================================
==================================================================
BUG: KMSAN: uninit-value in update_stack_state+0x6f1/0xa40 arch/x86/kernel/unwind_frame.c:244
CPU: 1 PID: 5514 Comm: syz-executor2 Tainted: G    B            4.16.0+ #83
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14a/0x1d0 lib/dump_stack.c:53
 kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1067
 __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:676
 update_stack_state+0x6f1/0xa40 arch/x86/kernel/unwind_frame.c:244
 unwind_next_frame+0x618/0xe50 arch/x86/kernel/unwind_frame.c:329
 show_trace_log_lvl+0xb49/0x1030 arch/x86/kernel/dumpstack.c:212
 show_stack+0xfc/0x150 arch/x86/kernel/dumpstack.c:236
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:53
 panic+0x39d/0x940 kernel/panic.c:183
 __warn+0x40f/0x580 kernel/panic.c:547
 report_bug+0x72a/0x880 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:179 [inline]
 do_error_trap+0x1aa/0x600 arch/x86/kernel/traps.c:297
 do_invalid_op+0x46/0x50 arch/x86/kernel/traps.c:316
 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:986
RIP: 0010:__mcopy_atomic mm/userfaultfd.c:413 [inline]
RIP: 0010:mfill_zeropage+0x69b/0x16e0 mm/userfaultfd.c:574
RSP: 0018:ffff88016515f9a8 EFLAGS: 00010287
RAX: ffffffff81cf322b RBX: 0000000000000000 RCX: 0000000000040000
RDX: ffffc9000256a000 RSI: 0000000000000016 RDI: 0000000000000017
RBP: ffff88016515faf0 R08: 0000000001080020 R09: 0000000000000002
R10: 00007fffdf003000 R11: 0000000000000000 R12: ffff880167990918
R13: 0000000000000000 R14: 00000000000002fa R15: ffff880166b6c800
 userfaultfd_zeropage fs/userfaultfd.c:1723 [inline]
 userfaultfd_ioctl+0x2949/0x6350 fs/userfaultfd.c:1820
 vfs_ioctl fs/ioctl.c:46 [inline]
 do_vfs_ioctl+0xaf0/0x2440 fs/ioctl.c:686
 SYSC_ioctl+0x1d2/0x260 fs/ioctl.c:701
 SyS_ioctl+0x54/0x80 fs/ioctl.c:692
 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x3d/0xa2
RIP: 0033:0x455279
RSP: 002b:00007f6af5423c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f6af54246d4 RCX: 0000000000455279
RDX: 0000000020000240 RSI: 00000000c020aa04 RDI: 0000000000000014
RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 000000000000033d R14: 00000000006f7e58 R15: 0000000000000001

Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:278 [inline]
 kmsan_save_stack mm/kmsan/kmsan.c:293 [inline]
 kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:684
 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:521
 update_stack_state+0x9e2/0xa40 arch/x86/kernel/unwind_frame.c:261
 unwind_next_frame+0x618/0xe50 arch/x86/kernel/unwind_frame.c:329
 show_trace_log_lvl+0xb49/0x1030 arch/x86/kernel/dumpstack.c:212
 show_stack+0xfc/0x150 arch/x86/kernel/dumpstack.c:236
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:53
 panic+0x39d/0x940 kernel/panic.c:183
 __warn+0x40f/0x580 kernel/panic.c:547
 report_bug+0x72a/0x880 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:179 [inline]
 do_error_trap+0x1aa/0x600 arch/x86/kernel/traps.c:297
 do_invalid_op+0x46/0x50 arch/x86/kernel/traps.c:316
 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:986
 __mcopy_atomic mm/userfaultfd.c:413 [inline]
 mfill_zeropage+0x69b/0x16e0 mm/userfaultfd.c:574
 userfaultfd_zeropage fs/userfaultfd.c:1723 [inline]
 userfaultfd_ioctl+0x2949/0x6350 fs/userfaultfd.c:1820
 vfs_ioctl fs/ioctl.c:46 [inline]
 do_vfs_ioctl+0xaf0/0x2440 fs/ioctl.c:686
 SYSC_ioctl+0x1d2/0x260 fs/ioctl.c:701
 SyS_ioctl+0x54/0x80 fs/ioctl.c:692
 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x3d/0xa2
Local variable description: ----oldbit.i.i.i@pick_next_task_fair
Variable was created at:
 pick_next_task_fair+0x63/0x1f70 kernel/sched/fair.c:6642
 pick_next_task+0x1b4/0x410 kernel/sched/core.c:3290
==================================================================
==================================================================
BUG: KMSAN: uninit-value in core_kernel_text kernel/extable.c:77 [inline]
BUG: KMSAN: uninit-value in kernel_text_address+0x248/0x3a0 kernel/extable.c:127
CPU: 1 PID: 5514 Comm: syz-executor2 Tainted: G    B            4.16.0+ #83
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14a/0x1d0 lib/dump_stack.c:53
 kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1067
 __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:676
 core_kernel_text kernel/extable.c:77 [inline]
 kernel_text_address+0x248/0x3a0 kernel/extable.c:127
 __kernel_text_address+0x34/0xe0 kernel/extable.c:107
 show_trace_log_lvl+0x954/0x1030 arch/x86/kernel/dumpstack.c:175
 show_stack+0xfc/0x150 arch/x86/kernel/dumpstack.c:236
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:53
 panic+0x39d/0x940 kernel/panic.c:183
 __warn+0x40f/0x580 kernel/panic.c:547
 report_bug+0x72a/0x880 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:179 [inline]
 do_error_trap+0x1aa/0x600 arch/x86/kernel/traps.c:297
 do_invalid_op+0x46/0x50 arch/x86/kernel/traps.c:316
 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:986
RIP: 0010:__mcopy_atomic mm/userfaultfd.c:413 [inline]
RIP: 0010:mfill_zeropage+0x69b/0x16e0 mm/userfaultfd.c:574
RSP: 0018:ffff88016515f9a8 EFLAGS: 00010287
RAX: ffffffff81cf322b RBX: 0000000000000000 RCX: 0000000000040000
RDX: ffffc9000256a000 RSI: 0000000000000016 RDI: 0000000000000017
RBP: ffff88016515faf0 R08: 0000000001080020 R09: 0000000000000002
R10: 00007fffdf003000 R11: 0000000000000000 R12: ffff880167990918
R13: 0000000000000000 R14: 00000000000002fa R15: ffff880166b6c800
 userfaultfd_zeropage fs/userfaultfd.c:1723 [inline]
 userfaultfd_ioctl+0x2949/0x6350 fs/userfaultfd.c:1820
 vfs_ioctl fs/ioctl.c:46 [inline]
 do_vfs_ioctl+0xaf0/0x2440 fs/ioctl.c:686
 SYSC_ioctl+0x1d2/0x260 fs/ioctl.c:701
 SyS_ioctl+0x54/0x80 fs/ioctl.c:692
 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x3d/0xa2
RIP: 0033:0x455279
RSP: 002b:00007f6af5423c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f6af54246d4 RCX: 0000000000455279
RDX: 0000000020000240 RSI: 00000000c020aa04 RDI: 0000000000000014
RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 000000000000033d R14: 00000000006f7e58 R15: 0000000000000001

Local variable description: ----info@do_error_trap
Variable was created at:
 do_error_trap+0xac/0x600 arch/x86/kernel/traps.c:286
 do_invalid_op+0x46/0x50 arch/x86/kernel/traps.c:316
==================================================================
==================================================================
BUG: KMSAN: uninit-value in show_trace_log_lvl+0xd4d/0x1030 arch/x86/kernel/dumpstack.c:175
CPU: 1 PID: 5514 Comm: syz-executor2 Tainted: G    B            4.16.0+ #83
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14a/0x1d0 lib/dump_stack.c:53
 kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1067
 __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:676
 show_trace_log_lvl+0xd4d/0x1030 arch/x86/kernel/dumpstack.c:175
 show_stack+0xfc/0x150 arch/x86/kernel/dumpstack.c:236
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:53
 panic+0x39d/0x940 kernel/panic.c:183
 __warn+0x40f/0x580 kernel/panic.c:547
 report_bug+0x72a/0x880 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:179 [inline]
 do_error_trap+0x1aa/0x600 arch/x86/kernel/traps.c:297
 do_invalid_op+0x46/0x50 arch/x86/kernel/traps.c:316
 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:986
RIP: 0010:__mcopy_atomic mm/userfaultfd.c:413 [inline]
RIP: 0010:mfill_zeropage+0x69b/0x16e0 mm/userfaultfd.c:574
RSP: 0018:ffff88016515f9a8 EFLAGS: 00010287
RAX: ffffffff81cf322b RBX: 0000000000000000 RCX: 0000000000040000
RDX: ffffc9000256a000 RSI: 0000000000000016 RDI: 0000000000000017
RBP: ffff88016515faf0 R08: 0000000001080020 R09: 0000000000000002
R10: 00007fffdf003000 R11: 0000000000000000 R12: ffff880167990918
R13: 0000000000000000 R14: 00000000000002fa R15: ffff880166b6c800
 userfaultfd_zeropage fs/userfaultfd.c:1723 [inline]
 userfaultfd_ioctl+0x2949/0x6350 fs/userfaultfd.c:1820
 vfs_ioctl fs/ioctl.c:46 [inline]
 do_vfs_ioctl+0xaf0/0x2440 fs/ioctl.c:686
 SYSC_ioctl+0x1d2/0x260 fs/ioctl.c:701
 SyS_ioctl+0x54/0x80 fs/ioctl.c:692
 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x3d/0xa2
RIP: 0033:0x455279
RSP: 002b:00007f6af5423c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f6af54246d4 RCX: 0000000000455279
RDX: 0000000020000240 RSI: 00000000c020aa04 RDI: 0000000000000014
RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 000000000000033d R14: 00000000006f7e58 R15: 0000000000000001

Local variable description: ----info@do_error_trap
Variable was created at:
 do_error_trap+0xac/0x600 arch/x86/kernel/traps.c:286
 do_invalid_op+0x46/0x50 arch/x86/kernel/traps.c:316
==================================================================
==================================================================
BUG: KMSAN: uninit-value in core_kernel_text kernel/extable.c:77 [inline]
BUG: KMSAN: uninit-value in kernel_text_address+0x248/0x3a0 kernel/extable.c:127
CPU: 1 PID: 5514 Comm: syz-executor2 Tainted: G    B            4.16.0+ #83
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14a/0x1d0 lib/dump_stack.c:53
 kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1067
 __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:676
 core_kernel_text kernel/extable.c:77 [inline]
 kernel_text_address+0x248/0x3a0 kernel/extable.c:127
 __kernel_text_address+0x34/0xe0 kernel/extable.c:107
 show_trace_log_lvl+0x954/0x1030 arch/x86/kernel/dumpstack.c:175
 show_stack+0xfc/0x150 arch/x86/kernel/dumpstack.c:236
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:53
 panic+0x39d/0x940 kernel/panic.c:183
 __warn+0x40f/0x580 kernel/panic.c:547
 report_bug+0x72a/0x880 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:179 [inline]
 do_error_trap+0x1aa/0x600 arch/x86/kernel/traps.c:297
 do_invalid_op+0x46/0x50 arch/x86/kernel/traps.c:316
 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:986
RIP: 0010:__mcopy_atomic mm/userfaultfd.c:413 [inline]
RIP: 0010:mfill_zeropage+0x69b/0x16e0 mm/userfaultfd.c:574
RSP: 0018:ffff88016515f9a8 EFLAGS: 00010287
RAX: ffffffff81cf322b RBX: 0000000000000000 RCX: 0000000000040000
RDX: ffffc9000256a000 RSI: 0000000000000016 RDI: 0000000000000017
RBP: ffff88016515faf0 R08: 0000000001080020 R09: 0000000000000002
R10: 00007fffdf003000 R11: 0000000000000000 R12: ffff880167990918
R13: 0000000000000000 R14: 00000000000002fa R15: ffff880166b6c800
 userfaultfd_zeropage fs/userfaultfd.c:1723 [inline]
 userfaultfd_ioctl+0x2949/0x6350 fs/userfaultfd.c:1820
 vfs_ioctl fs/ioctl.c:46 [inline]
 do_vfs_ioctl+0xaf0/0x2440 fs/ioctl.c:686
 SYSC_ioctl+0x1d2/0x260 fs/ioctl.c:701
 SyS_ioctl+0x54/0x80 fs/ioctl.c:692
 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x3d/0xa2
RIP: 0033:0x455279
RSP: 002b:00007f6af5423c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f6af54246d4 RCX: 0000000000455279
RDX: 0000000020000240 RSI: 00000000c020aa04 RDI: 0000000000000014
RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 000000000000033d R14: 00000000006f7e58 R15: 0000000000000001

Local variable description: ----info@do_error_trap
Variable was created at:
 do_error_trap+0xac/0x600 arch/x86/kernel/traps.c:286
 do_invalid_op+0x46/0x50 arch/x86/kernel/traps.c:316
==================================================================
==================================================================
BUG: KMSAN: uninit-value in show_trace_log_lvl+0xd4d/0x1030 arch/x86/kernel/dumpstack.c:175
CPU: 1 PID: 5514 Comm: syz-executor2 Tainted: G    B            4.16.0+ #83
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14a/0x1d0 lib/dump_stack.c:53
 kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1067
 __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:676
 show_trace_log_lvl+0xd4d/0x1030 arch/x86/kernel/dumpstack.c:175
 show_stack+0xfc/0x150 arch/x86/kernel/dumpstack.c:236
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:53
 panic+0x39d/0x940 kernel/panic.c:183
 __warn+0x40f/0x580 kernel/panic.c:547
 report_bug+0x72a/0x880 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:179 [inline]
 do_error_trap+0x1aa/0x600 arch/x86/kernel/traps.c:297
 do_invalid_op+0x46/0x50 arch/x86/kernel/traps.c:316
 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:986
RIP: 0010:__mcopy_atomic mm/userfaultfd.c:413 [inline]
RIP: 0010:mfill_zeropage+0x69b/0x16e0 mm/userfaultfd.c:574
RSP: 0018:ffff88016515f9a8 EFLAGS: 00010287
RAX: ffffffff81cf322b RBX: 0000000000000000 RCX: 0000000000040000
RDX: ffffc9000256a000 RSI: 0000000000000016 RDI: 0000000000000017
RBP: ffff88016515faf0 R08: 0000000001080020 R09: 0000000000000002
R10: 00007fffdf003000 R11: 0000000000000000 R12: ffff880167990918
R13: 0000000000000000 R14: 00000000000002fa R15: ffff880166b6c800
 userfaultfd_zeropage fs/userfaultfd.c:1723 [inline]
 userfaultfd_ioctl+0x2949/0x6350 fs/userfaultfd.c:1820
 vfs_ioctl fs/ioctl.c:46 [inline]
 do_vfs_ioctl+0xaf0/0x2440 fs/ioctl.c:686
 SYSC_ioctl+0x1d2/0x260 fs/ioctl.c:701
 SyS_ioctl+0x54/0x80 fs/ioctl.c:692
 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x3d/0xa2
RIP: 0033:0x455279
RSP: 002b:00007f6af5423c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f6af54246d4 RCX: 0000000000455279
RDX: 0000000020000240 RSI: 00000000c020aa04 RDI: 0000000000000014

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/04/12 23:17 https://github.com/google/kmsan.git master 35ff515e4bda eb2295de .config console log report ci-upstream-kmsan-gce
* Struck through repros no longer work on HEAD.