INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.19' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 43.548909] ================================================================== [ 43.556335] BUG: KMSAN: uninit-value in pointer+0x11e5/0x1410 [ 43.562214] CPU: 0 PID: 4493 Comm: syz-executor409 Not tainted 4.16.0+ #87 [ 43.569205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 43.578539] Call Trace: [ 43.581117] dump_stack+0x185/0x1d0 [ 43.584725] ? pointer+0x11e5/0x1410 [ 43.588418] kmsan_report+0x142/0x240 [ 43.592204] __msan_warning_32+0x6c/0xb0 [ 43.596257] ? futex_wait_queue_me+0x401/0x710 [ 43.600818] pointer+0x11e5/0x1410 [ 43.604339] ? futex_wait_queue_me+0x476/0x710 [ 43.608934] vsnprintf+0xa2d/0x33c0 [ 43.612546] seq_printf+0x29f/0x420 [ 43.616162] ? futex_wait_queue_me+0x476/0x710 [ 43.620724] ? futex_wait_queue_me+0x476/0x710 [ 43.625285] ? futex_wait_queue_me+0x476/0x710 [ 43.629846] proc_pid_stack+0x326/0x470 [ 43.633801] proc_single_show+0x1af/0x300 [ 43.637937] ? proc_pid_wchan+0x250/0x250 [ 43.642066] ? proc_single_open+0x90/0x90 [ 43.646191] traverse+0x3c4/0xe60 [ 43.649625] ? __msan_poison_alloca+0x15c/0x1d0 [ 43.654272] seq_read+0x3dc/0x2260 [ 43.657793] ? security_file_permission+0x473/0x4b0 [ 43.662882] do_iter_read+0x880/0xd70 [ 43.666664] ? seq_open+0x360/0x360 [ 43.670271] vfs_readv+0x1ec/0x260 [ 43.673797] default_file_splice_read+0xa9a/0x1120 [ 43.678709] ? napi_complete_done+0x350/0x9d0 [ 43.683202] ? SYSC_tee+0x13d0/0x13d0 [ 43.686979] splice_direct_to_actor+0x4c6/0x1040 [ 43.691711] ? do_splice_direct+0x540/0x540 [ 43.696020] ? security_file_permission+0x28f/0x4b0 [ 43.701041] ? rw_verify_area+0x35e/0x580 [ 43.705178] do_splice_direct+0x335/0x540 [ 43.709309] do_sendfile+0x1067/0x1e40 [ 43.713183] SYSC_sendfile64+0x1b3/0x300 [ 43.717225] SyS_sendfile64+0x64/0x90 [ 43.721007] do_syscall_64+0x309/0x430 [ 43.724883] ? SYSC_sendfile+0x320/0x320 [ 43.728931] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 43.734099] RIP: 0033:0x445529 [ 43.737265] RSP: 002b:00007f3efe2a7d18 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 43.744951] RAX: ffffffffffffffda RBX: 00000000006dac24 RCX: 0000000000445529 [ 43.752204] RDX: 0000000020000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 43.759462] RBP: 0000000000000000 R08: 65732f636f72702f R09: 65732f636f72702f [ 43.766712] R10: 000000010000ffff R11: 0000000000000246 R12: 00007f3efe2a7d20 [ 43.773959] R13: 00000000006dac20 R14: 0000000000000000 R15: 0000000000000001 [ 43.781209] [ 43.782811] Uninit was stored to memory at: [ 43.787116] kmsan_internal_chain_origin+0x12b/0x210 [ 43.792199] __msan_chain_origin+0x69/0xc0 [ 43.796413] __save_stack_trace+0x829/0xb00 [ 43.800717] save_stack_trace_tsk+0x258/0x2f0 [ 43.805193] proc_pid_stack+0x26a/0x470 [ 43.809147] proc_single_show+0x1af/0x300 [ 43.813273] traverse+0x3c4/0xe60 [ 43.816875] seq_read+0x3dc/0x2260 [ 43.820394] do_iter_read+0x880/0xd70 [ 43.824191] vfs_readv+0x1ec/0x260 [ 43.827727] default_file_splice_read+0xa9a/0x1120 [ 43.832633] splice_direct_to_actor+0x4c6/0x1040 [ 43.837364] do_splice_direct+0x335/0x540 [ 43.841497] do_sendfile+0x1067/0x1e40 [ 43.845360] SYSC_sendfile64+0x1b3/0x300 [ 43.849398] SyS_sendfile64+0x64/0x90 [ 43.853177] do_syscall_64+0x309/0x430 [ 43.857051] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 43.862223] Uninit was stored to memory at: [ 43.866529] kmsan_internal_chain_origin+0x12b/0x210 [ 43.871611] __msan_chain_origin+0x69/0xc0 [ 43.875826] update_stack_state+0x959/0xa40 [ 43.880137] unwind_next_frame+0x618/0xe50 [ 43.884349] __save_stack_trace+0x734/0xb00 [ 43.888649] save_stack_trace_tsk+0x258/0x2f0 [ 43.893123] proc_pid_stack+0x26a/0x470 [ 43.897077] proc_single_show+0x1af/0x300 [ 43.901211] traverse+0x3c4/0xe60 [ 43.904642] seq_read+0x3dc/0x2260 [ 43.908161] do_iter_read+0x880/0xd70 [ 43.911939] vfs_readv+0x1ec/0x260 [ 43.915458] default_file_splice_read+0xa9a/0x1120 [ 43.920391] splice_direct_to_actor+0x4c6/0x1040 [ 43.925126] do_splice_direct+0x335/0x540 [ 43.929254] do_sendfile+0x1067/0x1e40 [ 43.933129] SYSC_sendfile64+0x1b3/0x300 [ 43.937170] SyS_sendfile64+0x64/0x90 [ 43.940951] do_syscall_64+0x309/0x430 [ 43.944818] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 43.949981] Local variable description: ----flags.i.i.i@rcu_all_qs [ 43.956270] Variable was created at: [ 43.959970] rcu_all_qs+0x32/0x1f0 [ 43.963496] _cond_resched+0x3c/0xd0 [ 43.967193] ================================================================== [ 43.974527] Disabling lock debugging due to kernel taint [ 43.979954] Kernel panic - not syncing: panic_on_warn set ... [ 43.979954] [ 43.987297] CPU: 0 PID: 4493 Comm: syz-executor409 Tainted: G B 4.16.0+ #87 [ 43.995589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 44.004927] Call Trace: [ 44.007501] dump_stack+0x185/0x1d0 [ 44.011121] panic+0x39d/0x940 [ 44.014300] ? pointer+0x11e5/0x1410 [ 44.018007] kmsan_report+0x238/0x240 [ 44.021795] __msan_warning_32+0x6c/0xb0 [ 44.025837] ? futex_wait_queue_me+0x401/0x710 [ 44.030400] pointer+0x11e5/0x1410 [ 44.033933] ? futex_wait_queue_me+0x476/0x710 [ 44.038497] vsnprintf+0xa2d/0x33c0 [ 44.042106] seq_printf+0x29f/0x420 [ 44.045721] ? futex_wait_queue_me+0x476/0x710 [ 44.050282] ? futex_wait_queue_me+0x476/0x710 [ 44.054843] ? futex_wait_queue_me+0x476/0x710 [ 44.059406] proc_pid_stack+0x326/0x470 [ 44.063368] proc_single_show+0x1af/0x300 [ 44.067499] ? proc_pid_wchan+0x250/0x250 [ 44.071627] ? proc_single_open+0x90/0x90 [ 44.075753] traverse+0x3c4/0xe60 [ 44.079186] ? __msan_poison_alloca+0x15c/0x1d0 [ 44.083835] seq_read+0x3dc/0x2260 [ 44.087359] ? security_file_permission+0x473/0x4b0 [ 44.092371] do_iter_read+0x880/0xd70 [ 44.096153] ? seq_open+0x360/0x360 [ 44.099757] vfs_readv+0x1ec/0x260 [ 44.103282] default_file_splice_read+0xa9a/0x1120 [ 44.108193] ? napi_complete_done+0x350/0x9d0 [ 44.112672] ? SYSC_tee+0x13d0/0x13d0 [ 44.116459] splice_direct_to_actor+0x4c6/0x1040 [ 44.121195] ? do_splice_direct+0x540/0x540 [ 44.125499] ? security_file_permission+0x28f/0x4b0 [ 44.130500] ? rw_verify_area+0x35e/0x580 [ 44.134628] do_splice_direct+0x335/0x540 [ 44.138760] do_sendfile+0x1067/0x1e40 [ 44.142631] SYSC_sendfile64+0x1b3/0x300 [ 44.146673] SyS_sendfile64+0x64/0x90 [ 44.150455] do_syscall_64+0x309/0x430 [ 44.154332] ? SYSC_sendfile+0x320/0x320 [ 44.158372] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 44.163540] RIP: 0033:0x445529 [ 44.166706] RSP: 002b:00007f3efe2a7d18 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 44.174391] RAX: ffffffffffffffda RBX: 00000000006dac24 RCX: 0000000000445529 [ 44.181649] RDX: 0000000020000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 44.188913] RBP: 0000000000000000 R08: 65732f636f72702f R09: 65732f636f72702f [ 44.196162] R10: 000000010000ffff R11: 0000000000000246 R12: 00007f3efe2a7d20 [ 44.203413] R13: 00000000006dac20 R14: 0000000000000000 R15: 0000000000000001 [ 44.211157] Dumping ftrace buffer: [ 44.214681] (ftrace buffer empty) [ 44.218366] Kernel Offset: disabled [ 44.221969] Rebooting in 86400 seconds..