INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.27' (ECDSA) to the list of known hosts. 2018/04/09 01:35:22 parsed 1 programs 2018/04/09 01:35:22 executed programs: 0 syzkaller login: [ 39.917411] ================================================================== [ 39.924995] WARNING: memcpy-param-overlap in generic_perform_write+0x4c6/0x990 [ 39.932471] __msan_memcpy(ffff8801b8d5a001, ffff8801b8d5a000, 4095) [ 39.938973] CPU: 1 PID: 3704 Comm: syz-executor5 Not tainted 4.16.0+ #82 [ 39.945827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 39.955204] Call Trace: [ 39.957834] dump_stack+0x185/0x1d0 [ 39.961496] __msan_memcpy+0x90/0x1f0 [ 39.965331] iov_iter_copy_from_user_atomic+0xb04/0x17d0 [ 39.970828] generic_perform_write+0x4c6/0x990 [ 39.975420] ================================================================== [ 39.982785] BUG: KMSAN: uninit-value in kernel_text_address+0x248/0x3a0 [ 39.989533] CPU: 1 PID: 3704 Comm: syz-executor5 Not tainted 4.16.0+ #82 [ 39.996360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 40.005701] Call Trace: [ 40.008289] dump_stack+0x14a/0x1d0 [ 40.011914] ? kernel_text_address+0x248/0x3a0 [ 40.016489] kmsan_report+0x142/0x240 [ 40.020291] __msan_warning_32+0x6c/0xb0 [ 40.024350] kernel_text_address+0x248/0x3a0 [ 40.028761] __kernel_text_address+0x34/0xe0 [ 40.033169] show_trace_log_lvl+0x954/0x1030 [ 40.037579] ? __generic_file_write_iter+0x43b/0x990 [ 40.042690] show_stack+0xfc/0x150 [ 40.046226] ? print_worker_info+0x1b0/0x660 [ 40.050637] dump_stack+0x185/0x1d0 [ 40.054262] __msan_memcpy+0x90/0x1f0 [ 40.058061] iov_iter_copy_from_user_atomic+0xb04/0x17d0 [ 40.063521] generic_perform_write+0x4c6/0x990 [ 40.068105] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 40.073475] __generic_file_write_iter+0x43b/0x990 [ 40.078401] ? rwsem_down_write_failed+0x2c/0x30 [ 40.083159] generic_file_write_iter+0x814/0xbf0 [ 40.087915] ? __generic_file_write_iter+0x990/0x990 [ 40.093011] do_iter_readv_writev+0x7bb/0x970 [ 40.097509] ? __generic_file_write_iter+0x990/0x990 [ 40.102609] do_iter_write+0x30d/0xd40 [ 40.106492] ? kmsan_set_origin_inline+0x6b/0x120 [ 40.111335] ? __generic_file_write_iter+0x990/0x990 [ 40.116432] vfs_iter_write+0x118/0x180 [ 40.120412] iter_file_splice_write+0xbc3/0x1710 [ 40.125180] ? splice_from_pipe+0x2c0/0x2c0 [ 40.129499] ? splice_from_pipe+0x2c0/0x2c0 [ 40.133815] direct_splice_actor+0x19b/0x200 [ 40.138223] splice_direct_to_actor+0x764/0x1040 [ 40.142975] ? do_splice_direct+0x540/0x540 [ 40.147292] ? security_file_permission+0x28f/0x4b0 [ 40.152307] ? rw_verify_area+0x35e/0x580 [ 40.156461] do_splice_direct+0x335/0x540 [ 40.160608] do_sendfile+0x1067/0x1e40 [ 40.164507] SYSC_sendfile64+0x1b3/0x300 [ 40.168575] SyS_sendfile64+0x64/0x90 [ 40.172371] do_syscall_64+0x309/0x430 [ 40.176262] ? SYSC_sendfile+0x320/0x320 [ 40.180324] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 40.185507] RIP: 0033:0x455259 [ 40.188689] RSP: 002b:00007f50174f1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 40.196391] RAX: ffffffffffffffda RBX: 00007f50174f26d4 RCX: 0000000000455259 [ 40.203655] RDX: 00000000200011c0 RSI: 0000000000000003 RDI: 0000000000000003 [ 40.210916] RBP: 000000000072c010 R08: 0000000000000000 R09: 0000000000000000 [ 40.218181] R10: 0000000004000fed R11: 0000000000000246 R12: 00000000ffffffff [ 40.225450] R13: 00000000000004c6 R14: 00000000006fa330 R15: 0000000000000002 [ 40.232714] [ 40.234333] Local variable description: ----newattrs.i@file_remove_privs [ 40.241159] Variable was created at: [ 40.244883] file_remove_privs+0x46/0x830 [ 40.249029] __generic_file_write_iter+0x1d7/0x990 [ 40.253948] ================================================================== [ 40.261295] Disabling lock debugging due to kernel taint [ 40.266733] Kernel panic - not syncing: panic_on_warn set ... [ 40.266733] [ 40.274095] CPU: 1 PID: 3704 Comm: syz-executor5 Tainted: G B 4.16.0+ #82 [ 40.282225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 40.291572] Call Trace: [ 40.294163] dump_stack+0x14a/0x1d0 [ 40.297787] panic+0x39d/0x940 [ 40.300999] ? kernel_text_address+0x248/0x3a0 [ 40.305576] kmsan_report+0x238/0x240 [ 40.309377] __msan_warning_32+0x6c/0xb0 [ 40.313434] kernel_text_address+0x248/0x3a0 [ 40.317848] __kernel_text_address+0x34/0xe0 [ 40.322264] show_trace_log_lvl+0x954/0x1030 [ 40.326672] ? __generic_file_write_iter+0x43b/0x990 [ 40.331777] show_stack+0xfc/0x150 [ 40.335309] ? print_worker_info+0x1b0/0x660 [ 40.339717] dump_stack+0x185/0x1d0 [ 40.343343] __msan_memcpy+0x90/0x1f0 [ 40.347141] iov_iter_copy_from_user_atomic+0xb04/0x17d0 [ 40.352598] generic_perform_write+0x4c6/0x990 [ 40.357182] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 40.362545] __generic_file_write_iter+0x43b/0x990 [ 40.367468] ? rwsem_down_write_failed+0x2c/0x30 [ 40.372223] generic_file_write_iter+0x814/0xbf0 [ 40.376978] ? __generic_file_write_iter+0x990/0x990 [ 40.382073] do_iter_readv_writev+0x7bb/0x970 [ 40.386570] ? __generic_file_write_iter+0x990/0x990 [ 40.391670] do_iter_write+0x30d/0xd40 [ 40.395549] ? kmsan_set_origin_inline+0x6b/0x120 [ 40.400391] ? __generic_file_write_iter+0x990/0x990 [ 40.405487] vfs_iter_write+0x118/0x180 [ 40.409461] iter_file_splice_write+0xbc3/0x1710 [ 40.414225] ? splice_from_pipe+0x2c0/0x2c0 [ 40.418545] ? splice_from_pipe+0x2c0/0x2c0 [ 40.422861] direct_splice_actor+0x19b/0x200 [ 40.427266] splice_direct_to_actor+0x764/0x1040 [ 40.432014] ? do_splice_direct+0x540/0x540 [ 40.436332] ? security_file_permission+0x28f/0x4b0 [ 40.441344] ? rw_verify_area+0x35e/0x580 [ 40.445487] do_splice_direct+0x335/0x540 [ 40.449634] do_sendfile+0x1067/0x1e40 [ 40.453527] SYSC_sendfile64+0x1b3/0x300 [ 40.457583] SyS_sendfile64+0x64/0x90 [ 40.461377] do_syscall_64+0x309/0x430 [ 40.465263] ? SYSC_sendfile+0x320/0x320 [ 40.469319] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 40.474498] RIP: 0033:0x455259 [ 40.477674] RSP: 002b:00007f50174f1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 40.485373] RAX: ffffffffffffffda RBX: 00007f50174f26d4 RCX: 0000000000455259 [ 40.492630] RDX: 00000000200011c0 RSI: 0000000000000003 RDI: 0000000000000003 [ 40.499894] RBP: 000000000072c010 R08: 0000000000000000 R09: 0000000000000000 [ 40.507153] R10: 0000000004000fed R11: 0000000000000246 R12: 00000000ffffffff [ 40.514411] R13: 00000000000004c6 R14: 00000000006fa330 R15: 0000000000000002 [ 40.522157] Dumping ftrace buffer: [ 40.525678] (ftrace buffer empty) [ 40.529358] Kernel Offset: disabled [ 40.532958] Rebooting in 86400 seconds..