INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.12' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 43.254931] ================================================================== [ 43.262308] BUG: KMSAN: uninit-value in pointer+0x11e5/0x1410 [ 43.268171] CPU: 1 PID: 4507 Comm: syzkaller999157 Not tainted 4.16.0+ #87 [ 43.275162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 43.284496] Call Trace: [ 43.287077] dump_stack+0x185/0x1d0 [ 43.290691] ? pointer+0x11e5/0x1410 [ 43.294381] kmsan_report+0x142/0x240 [ 43.298161] __msan_warning_32+0x6c/0xb0 [ 43.302202] ? proc_pid_stack+0x251/0x470 [ 43.306326] pointer+0x11e5/0x1410 [ 43.309846] ? proc_pid_stack+0x26a/0x470 [ 43.313971] vsnprintf+0xa2d/0x33c0 [ 43.317579] ? ieee80211_do_open+0x27f4/0x3640 [ 43.322138] seq_printf+0x29f/0x420 [ 43.325754] ? proc_pid_stack+0x26a/0x470 [ 43.329879] ? proc_pid_stack+0x26a/0x470 [ 43.334011] ? proc_pid_stack+0x26a/0x470 [ 43.338147] proc_pid_stack+0x326/0x470 [ 43.342104] proc_single_show+0x1af/0x300 [ 43.346236] ? proc_pid_wchan+0x250/0x250 [ 43.350367] ? proc_single_open+0x90/0x90 [ 43.354492] traverse+0x3c4/0xe60 [ 43.357930] ? __msan_poison_alloca+0x15c/0x1d0 [ 43.362575] seq_read+0x3dc/0x2260 [ 43.366096] ? security_file_permission+0x473/0x4b0 [ 43.371112] do_iter_read+0x880/0xd70 [ 43.374897] ? seq_open+0x360/0x360 [ 43.378512] vfs_readv+0x1ec/0x260 [ 43.382061] default_file_splice_read+0xa9a/0x1120 [ 43.386994] ? security_file_permission+0x473/0x4b0 [ 43.392026] ? rw_verify_area+0x35e/0x580 [ 43.396185] ? SYSC_tee+0x13d0/0x13d0 [ 43.399974] splice_direct_to_actor+0x4c6/0x1040 [ 43.404726] ? do_splice_direct+0x540/0x540 [ 43.409043] ? security_file_permission+0x28f/0x4b0 [ 43.414059] ? rw_verify_area+0x35e/0x580 [ 43.418214] do_splice_direct+0x335/0x540 [ 43.422352] do_sendfile+0x1067/0x1e40 [ 43.426224] SYSC_sendfile64+0x1b3/0x300 [ 43.430270] SyS_sendfile64+0x64/0x90 [ 43.434061] do_syscall_64+0x309/0x430 [ 43.437935] ? SYSC_sendfile+0x320/0x320 [ 43.441978] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 43.447145] RIP: 0033:0x440099 [ 43.450312] RSP: 002b:00007ffc2a359078 EFLAGS: 00000213 ORIG_RAX: 0000000000000028 [ 43.457996] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440099 [ 43.465250] RDX: 0000000020000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 43.472496] RBP: 00000000006ca018 R08: 0000000000000010 R09: 65732f636f72702f [ 43.479741] R10: 0000000000000fff R11: 0000000000000213 R12: 0000000000401920 [ 43.486985] R13: 00000000004019b0 R14: 0000000000000000 R15: 0000000000000000 [ 43.494236] [ 43.495848] Uninit was stored to memory at: [ 43.500152] kmsan_internal_chain_origin+0x12b/0x210 [ 43.505230] __msan_chain_origin+0x69/0xc0 [ 43.509443] __save_stack_trace+0x829/0xb00 [ 43.513741] save_stack_trace_tsk+0x258/0x2f0 [ 43.518222] proc_pid_stack+0x26a/0x470 [ 43.522174] proc_single_show+0x1af/0x300 [ 43.526306] traverse+0x3c4/0xe60 [ 43.529742] seq_read+0x3dc/0x2260 [ 43.533259] do_iter_read+0x880/0xd70 [ 43.537043] vfs_readv+0x1ec/0x260 [ 43.540567] default_file_splice_read+0xa9a/0x1120 [ 43.545472] splice_direct_to_actor+0x4c6/0x1040 [ 43.550203] do_splice_direct+0x335/0x540 [ 43.554328] do_sendfile+0x1067/0x1e40 [ 43.558193] SYSC_sendfile64+0x1b3/0x300 [ 43.562227] SyS_sendfile64+0x64/0x90 [ 43.566005] do_syscall_64+0x309/0x430 [ 43.569887] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 43.575050] Uninit was stored to memory at: [ 43.579348] kmsan_internal_chain_origin+0x12b/0x210 [ 43.584425] __msan_chain_origin+0x69/0xc0 [ 43.588636] update_stack_state+0x959/0xa40 [ 43.592937] unwind_next_frame+0x618/0xe50 [ 43.597151] __save_stack_trace+0x734/0xb00 [ 43.601450] save_stack_trace_tsk+0x258/0x2f0 [ 43.605922] proc_pid_stack+0x26a/0x470 [ 43.609872] proc_single_show+0x1af/0x300 [ 43.613994] traverse+0x3c4/0xe60 [ 43.617512] seq_read+0x3dc/0x2260 [ 43.621043] do_iter_read+0x880/0xd70 [ 43.624830] vfs_readv+0x1ec/0x260 [ 43.628346] default_file_splice_read+0xa9a/0x1120 [ 43.633249] splice_direct_to_actor+0x4c6/0x1040 [ 43.637980] do_splice_direct+0x335/0x540 [ 43.642104] do_sendfile+0x1067/0x1e40 [ 43.645967] SYSC_sendfile64+0x1b3/0x300 [ 43.650006] SyS_sendfile64+0x64/0x90 [ 43.653791] do_syscall_64+0x309/0x430 [ 43.657656] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 43.662820] Local variable description: ----oc.i.i@__alloc_pages_nodemask [ 43.669717] Variable was created at: [ 43.673410] __alloc_pages_nodemask+0x10f/0x5dc0 [ 43.678142] alloc_pages_current+0x6b5/0x970 [ 43.682522] ================================================================== [ 43.689854] Disabling lock debugging due to kernel taint [ 43.695277] Kernel panic - not syncing: panic_on_warn set ... [ 43.695277] [ 43.702619] CPU: 1 PID: 4507 Comm: syzkaller999157 Tainted: G B 4.16.0+ #87 [ 43.710910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 43.720241] Call Trace: [ 43.722820] dump_stack+0x185/0x1d0 [ 43.726427] panic+0x39d/0x940 [ 43.729606] ? pointer+0x11e5/0x1410 [ 43.733304] kmsan_report+0x238/0x240 [ 43.737085] __msan_warning_32+0x6c/0xb0 [ 43.741124] ? proc_pid_stack+0x251/0x470 [ 43.745247] pointer+0x11e5/0x1410 [ 43.748767] ? proc_pid_stack+0x26a/0x470 [ 43.752891] vsnprintf+0xa2d/0x33c0 [ 43.756500] ? ieee80211_do_open+0x27f4/0x3640 [ 43.761063] seq_printf+0x29f/0x420 [ 43.764676] ? proc_pid_stack+0x26a/0x470 [ 43.768802] ? proc_pid_stack+0x26a/0x470 [ 43.772926] ? proc_pid_stack+0x26a/0x470 [ 43.777060] proc_pid_stack+0x326/0x470 [ 43.781024] proc_single_show+0x1af/0x300 [ 43.785159] ? proc_pid_wchan+0x250/0x250 [ 43.789285] ? proc_single_open+0x90/0x90 [ 43.793409] traverse+0x3c4/0xe60 [ 43.796841] ? __msan_poison_alloca+0x15c/0x1d0 [ 43.801489] seq_read+0x3dc/0x2260 [ 43.805014] ? security_file_permission+0x473/0x4b0 [ 43.810043] do_iter_read+0x880/0xd70 [ 43.813833] ? seq_open+0x360/0x360 [ 43.817441] vfs_readv+0x1ec/0x260 [ 43.820967] default_file_splice_read+0xa9a/0x1120 [ 43.825878] ? security_file_permission+0x473/0x4b0 [ 43.830880] ? rw_verify_area+0x35e/0x580 [ 43.835016] ? SYSC_tee+0x13d0/0x13d0 [ 43.838802] splice_direct_to_actor+0x4c6/0x1040 [ 43.843537] ? do_splice_direct+0x540/0x540 [ 43.847838] ? security_file_permission+0x28f/0x4b0 [ 43.852845] ? rw_verify_area+0x35e/0x580 [ 43.856984] do_splice_direct+0x335/0x540 [ 43.861116] do_sendfile+0x1067/0x1e40 [ 43.864993] SYSC_sendfile64+0x1b3/0x300 [ 43.869044] SyS_sendfile64+0x64/0x90 [ 43.872836] do_syscall_64+0x309/0x430 [ 43.876701] ? SYSC_sendfile+0x320/0x320 [ 43.880743] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 43.885906] RIP: 0033:0x440099 [ 43.889074] RSP: 002b:00007ffc2a359078 EFLAGS: 00000213 ORIG_RAX: 0000000000000028 [ 43.896758] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440099 [ 43.904008] RDX: 0000000020000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 43.911261] RBP: 00000000006ca018 R08: 0000000000000010 R09: 65732f636f72702f [ 43.918507] R10: 0000000000000fff R11: 0000000000000213 R12: 0000000000401920 [ 43.925761] R13: 00000000004019b0 R14: 0000000000000000 R15: 0000000000000000 [ 43.933489] Dumping ftrace buffer: [ 43.937012] (ftrace buffer empty) [ 43.940698] Kernel Offset: disabled [ 43.944301] Rebooting in 86400 seconds..