INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.40' (ECDSA) to the list of known hosts. 2018/04/17 12:59:34 parsed 1 programs 2018/04/17 12:59:34 executed programs: 0 syzkaller login: [ 40.151234] ================================================================== [ 40.158829] WARNING: memcpy-param-overlap in generic_perform_write+0x4c6/0x990 [ 40.166259] __msan_memcpy(ffff8801cd3ad009, ffff8801cd3ad000, 2195) [ 40.172714] CPU: 1 PID: 4172 Comm: syz-executor0 Not tainted 4.16.0+ #84 [ 40.179543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 40.188888] Call Trace: [ 40.191479] dump_stack+0x185/0x1d0 [ 40.195129] __msan_memcpy+0x90/0x1f0 [ 40.198932] iov_iter_copy_from_user_atomic+0xb04/0x17d0 [ 40.204368] ================================================================== [ 40.211710] BUG: KMSAN: uninit-value in kernel_text_address+0x248/0x3a0 [ 40.218443] CPU: 1 PID: 4172 Comm: syz-executor0 Not tainted 4.16.0+ #84 [ 40.225252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 40.234580] Call Trace: [ 40.237147] dump_stack+0x14a/0x1d0 [ 40.240757] ? kernel_text_address+0x248/0x3a0 [ 40.245316] kmsan_report+0x142/0x240 [ 40.249094] __msan_warning_32+0x6c/0xb0 [ 40.253133] kernel_text_address+0x248/0x3a0 [ 40.257519] __kernel_text_address+0x34/0xe0 [ 40.261919] show_trace_log_lvl+0x954/0x1030 [ 40.266307] ? generic_perform_write+0x4c6/0x990 [ 40.271056] show_stack+0xfc/0x150 [ 40.274584] ? print_worker_info+0x1b0/0x660 [ 40.278972] dump_stack+0x185/0x1d0 [ 40.282578] __msan_memcpy+0x90/0x1f0 [ 40.286360] iov_iter_copy_from_user_atomic+0xb04/0x17d0 [ 40.291796] generic_perform_write+0x4c6/0x990 [ 40.296380] __generic_file_write_iter+0x43b/0x990 [ 40.301297] ? rcu_all_qs+0x32/0x1f0 [ 40.304992] generic_file_write_iter+0x814/0xbf0 [ 40.309732] ? __generic_file_write_iter+0x990/0x990 [ 40.314828] do_iter_readv_writev+0x7bb/0x970 [ 40.319305] ? __generic_file_write_iter+0x990/0x990 [ 40.324388] do_iter_write+0x30d/0xd40 [ 40.328261] ? kmsan_set_origin_inline+0x6b/0x120 [ 40.333084] ? __generic_file_write_iter+0x990/0x990 [ 40.338164] vfs_iter_write+0x118/0x180 [ 40.342118] iter_file_splice_write+0xbc3/0x1710 [ 40.346858] ? splice_from_pipe+0x2c0/0x2c0 [ 40.351158] ? splice_from_pipe+0x2c0/0x2c0 [ 40.355457] direct_splice_actor+0x19b/0x200 [ 40.359844] splice_direct_to_actor+0x764/0x1040 [ 40.364579] ? do_splice_direct+0x540/0x540 [ 40.368880] ? security_file_permission+0x28f/0x4b0 [ 40.373893] ? rw_verify_area+0x35e/0x580 [ 40.378032] do_splice_direct+0x335/0x540 [ 40.382166] do_sendfile+0x1067/0x1e40 [ 40.386053] SYSC_sendfile64+0x1b3/0x300 [ 40.390097] SyS_sendfile64+0x64/0x90 [ 40.393876] do_syscall_64+0x309/0x430 [ 40.397745] ? SYSC_sendfile+0x320/0x320 [ 40.401805] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 40.406979] RIP: 0033:0x455329 [ 40.410146] RSP: 002b:00007f2f9d8c1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 40.417832] RAX: ffffffffffffffda RBX: 00007f2f9d8c26d4 RCX: 0000000000455329 [ 40.425081] RDX: 0000000020001000 RSI: 0000000000000008 RDI: 0000000000000008 [ 40.432328] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 40.439577] R10: 000000000000ffff R11: 0000000000000246 R12: 00000000ffffffff [ 40.446833] R13: 00000000000004c6 R14: 00000000006fa330 R15: 0000000000000000 [ 40.454086] [ 40.455700] Local variable description: ----ldt.i.i.i@switch_mm_irqs_off [ 40.462508] Variable was created at: [ 40.466219] switch_mm_irqs_off+0xe6/0x15d0 [ 40.470531] __schedule+0x5a3/0x730 [ 40.474132] ================================================================== [ 40.481462] Disabling lock debugging due to kernel taint [ 40.486885] Kernel panic - not syncing: panic_on_warn set ... [ 40.486885] [ 40.494229] CPU: 1 PID: 4172 Comm: syz-executor0 Tainted: G B 4.16.0+ #84 [ 40.502342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 40.511670] Call Trace: [ 40.514244] dump_stack+0x14a/0x1d0 [ 40.517850] panic+0x39d/0x940 [ 40.521049] ? kernel_text_address+0x248/0x3a0 [ 40.525619] kmsan_report+0x238/0x240 [ 40.529398] __msan_warning_32+0x6c/0xb0 [ 40.533439] kernel_text_address+0x248/0x3a0 [ 40.537826] __kernel_text_address+0x34/0xe0 [ 40.542218] show_trace_log_lvl+0x954/0x1030 [ 40.546610] ? generic_perform_write+0x4c6/0x990 [ 40.551350] show_stack+0xfc/0x150 [ 40.554867] ? print_worker_info+0x1b0/0x660 [ 40.559262] dump_stack+0x185/0x1d0 [ 40.562867] __msan_memcpy+0x90/0x1f0 [ 40.566647] iov_iter_copy_from_user_atomic+0xb04/0x17d0 [ 40.572087] generic_perform_write+0x4c6/0x990 [ 40.576651] __generic_file_write_iter+0x43b/0x990 [ 40.581556] ? rcu_all_qs+0x32/0x1f0 [ 40.585253] generic_file_write_iter+0x814/0xbf0 [ 40.589991] ? __generic_file_write_iter+0x990/0x990 [ 40.595083] do_iter_readv_writev+0x7bb/0x970 [ 40.599568] ? __generic_file_write_iter+0x990/0x990 [ 40.604656] do_iter_write+0x30d/0xd40 [ 40.608530] ? kmsan_set_origin_inline+0x6b/0x120 [ 40.613362] ? __generic_file_write_iter+0x990/0x990 [ 40.618444] vfs_iter_write+0x118/0x180 [ 40.622403] iter_file_splice_write+0xbc3/0x1710 [ 40.627151] ? splice_from_pipe+0x2c0/0x2c0 [ 40.631448] ? splice_from_pipe+0x2c0/0x2c0 [ 40.635747] direct_splice_actor+0x19b/0x200 [ 40.640135] splice_direct_to_actor+0x764/0x1040 [ 40.644870] ? do_splice_direct+0x540/0x540 [ 40.649171] ? security_file_permission+0x28f/0x4b0 [ 40.654168] ? rw_verify_area+0x35e/0x580 [ 40.658295] do_splice_direct+0x335/0x540 [ 40.662424] do_sendfile+0x1067/0x1e40 [ 40.666312] SYSC_sendfile64+0x1b3/0x300 [ 40.670367] SyS_sendfile64+0x64/0x90 [ 40.674156] do_syscall_64+0x309/0x430 [ 40.678043] ? SYSC_sendfile+0x320/0x320 [ 40.682113] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 40.687290] RIP: 0033:0x455329 [ 40.690457] RSP: 002b:00007f2f9d8c1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 40.698152] RAX: ffffffffffffffda RBX: 00007f2f9d8c26d4 RCX: 0000000000455329 [ 40.705399] RDX: 0000000020001000 RSI: 0000000000000008 RDI: 0000000000000008 [ 40.712646] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 40.719894] R10: 000000000000ffff R11: 0000000000000246 R12: 00000000ffffffff [ 40.727146] R13: 00000000000004c6 R14: 00000000006fa330 R15: 0000000000000000 [ 40.735340] Dumping ftrace buffer: [ 40.738857] (ftrace buffer empty) [ 40.742547] Kernel Offset: disabled [ 40.746148] Rebooting in 86400 seconds..