INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.14' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 30.483436] ================================================================== [ 30.490922] WARNING: memcpy-param-overlap in generic_perform_write+0x4c6/0x990 [ 30.498396] CPU: 1 PID: 3578 Comm: syzkaller633124 Not tainted 4.16.0+ #82 [ 30.505420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.514776] Call Trace: [ 30.517369] dump_stack+0x185/0x1d0 [ 30.520996] ? do_journal_get_write_access+0x330/0x330 [ 30.526267] __msan_memcpy+0x90/0x1f0 [ 30.530086] iov_iter_copy_from_user_atomic+0xb04/0x17d0 [ 30.535572] generic_perform_write+0x4c6/0x990 [ 30.540140] ================================================================== [ 30.547483] BUG: KMSAN: uninit-value in kernel_text_address+0x248/0x3a0 [ 30.554218] CPU: 1 PID: 3578 Comm: syzkaller633124 Not tainted 4.16.0+ #82 [ 30.561202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.570530] Call Trace: [ 30.573095] dump_stack+0x14a/0x1d0 [ 30.576703] ? kernel_text_address+0x248/0x3a0 [ 30.581271] kmsan_report+0x142/0x240 [ 30.585048] __msan_warning_32+0x6c/0xb0 [ 30.589087] kernel_text_address+0x248/0x3a0 [ 30.593483] __kernel_text_address+0x34/0xe0 [ 30.597873] show_trace_log_lvl+0x954/0x1030 [ 30.602260] ? __generic_file_write_iter+0x43b/0x990 [ 30.607344] show_stack+0xfc/0x150 [ 30.610860] ? print_worker_info+0x1b0/0x660 [ 30.615247] dump_stack+0x185/0x1d0 [ 30.618850] ? do_journal_get_write_access+0x330/0x330 [ 30.624118] __msan_memcpy+0x90/0x1f0 [ 30.627898] iov_iter_copy_from_user_atomic+0xb04/0x17d0 [ 30.633329] generic_perform_write+0x4c6/0x990 [ 30.637890] __generic_file_write_iter+0x43b/0x990 [ 30.642798] ext4_file_write_iter+0x10a0/0x1a10 [ 30.647443] ? kmsan_set_origin_inline+0x6b/0x120 [ 30.652264] ? ext4_file_read_iter+0x220/0x220 [ 30.656822] do_iter_readv_writev+0x7bb/0x970 [ 30.661296] ? ext4_file_read_iter+0x220/0x220 [ 30.665856] do_iter_write+0x30d/0xd40 [ 30.669728] ? kmsan_set_origin_inline+0x6b/0x120 [ 30.674552] ? ext4_file_read_iter+0x220/0x220 [ 30.679125] vfs_iter_write+0x118/0x180 [ 30.683186] iter_file_splice_write+0xbc3/0x1710 [ 30.687924] ? splice_from_pipe+0x2c0/0x2c0 [ 30.692222] ? splice_from_pipe+0x2c0/0x2c0 [ 30.696522] direct_splice_actor+0x19b/0x200 [ 30.700909] splice_direct_to_actor+0x764/0x1040 [ 30.705642] ? do_splice_direct+0x540/0x540 [ 30.709941] ? security_file_permission+0x28f/0x4b0 [ 30.714936] ? rw_verify_area+0x35e/0x580 [ 30.719075] do_splice_direct+0x335/0x540 [ 30.723311] do_sendfile+0x1067/0x1e40 [ 30.727190] SYSC_sendfile64+0x1b3/0x300 [ 30.731229] SyS_sendfile64+0x64/0x90 [ 30.735006] do_syscall_64+0x309/0x430 [ 30.738879] ? SYSC_sendfile+0x320/0x320 [ 30.742921] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 30.748091] RIP: 0033:0x4457b9 [ 30.751256] RSP: 002b:00007f92d22bada8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 30.758943] RAX: ffffffffffffffda RBX: 00000000006dac74 RCX: 00000000004457b9 [ 30.766191] RDX: 0000000020000040 RSI: 0000000000000007 RDI: 0000000000000007 [ 30.773440] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 30.780687] R10: 7527fb3200000000 R11: 0000000000000246 R12: 00000000006dac70 [ 30.787932] R13: 0030656c69662f2e R14: 2f30656c69662f2e R15: 0000000000000009 [ 30.795179] [ 30.796792] Local variable description: ----newattrs.i@file_remove_privs [ 30.803601] Variable was created at: [ 30.807295] file_remove_privs+0x46/0x830 [ 30.811418] __generic_file_write_iter+0x1d7/0x990 [ 30.816315] ================================================================== [ 30.823645] Disabling lock debugging due to kernel taint [ 30.829067] Kernel panic - not syncing: panic_on_warn set ... [ 30.829067] [ 30.836409] CPU: 1 PID: 3578 Comm: syzkaller633124 Tainted: G B 4.16.0+ #82 [ 30.844697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.854035] Call Trace: [ 30.856606] dump_stack+0x14a/0x1d0 [ 30.860211] panic+0x39d/0x940 [ 30.863390] ? kernel_text_address+0x248/0x3a0 [ 30.867948] kmsan_report+0x238/0x240 [ 30.871729] __msan_warning_32+0x6c/0xb0 [ 30.875772] kernel_text_address+0x248/0x3a0 [ 30.880159] __kernel_text_address+0x34/0xe0 [ 30.884546] show_trace_log_lvl+0x954/0x1030 [ 30.888933] ? __generic_file_write_iter+0x43b/0x990 [ 30.894016] show_stack+0xfc/0x150 [ 30.897544] ? print_worker_info+0x1b0/0x660 [ 30.901936] dump_stack+0x185/0x1d0 [ 30.905556] ? do_journal_get_write_access+0x330/0x330 [ 30.910812] __msan_memcpy+0x90/0x1f0 [ 30.914593] iov_iter_copy_from_user_atomic+0xb04/0x17d0 [ 30.920025] generic_perform_write+0x4c6/0x990 [ 30.924584] __generic_file_write_iter+0x43b/0x990 [ 30.929495] ext4_file_write_iter+0x10a0/0x1a10 [ 30.934143] ? kmsan_set_origin_inline+0x6b/0x120 [ 30.938976] ? ext4_file_read_iter+0x220/0x220 [ 30.943535] do_iter_readv_writev+0x7bb/0x970 [ 30.948012] ? ext4_file_read_iter+0x220/0x220 [ 30.952573] do_iter_write+0x30d/0xd40 [ 30.956442] ? kmsan_set_origin_inline+0x6b/0x120 [ 30.961268] ? ext4_file_read_iter+0x220/0x220 [ 30.965829] vfs_iter_write+0x118/0x180 [ 30.969791] iter_file_splice_write+0xbc3/0x1710 [ 30.974528] ? splice_from_pipe+0x2c0/0x2c0 [ 30.978827] ? splice_from_pipe+0x2c0/0x2c0 [ 30.983134] direct_splice_actor+0x19b/0x200 [ 30.987527] splice_direct_to_actor+0x764/0x1040 [ 30.992263] ? do_splice_direct+0x540/0x540 [ 30.996564] ? security_file_permission+0x28f/0x4b0 [ 31.001556] ? rw_verify_area+0x35e/0x580 [ 31.005684] do_splice_direct+0x335/0x540 [ 31.009812] do_sendfile+0x1067/0x1e40 [ 31.013683] SYSC_sendfile64+0x1b3/0x300 [ 31.017723] SyS_sendfile64+0x64/0x90 [ 31.021500] do_syscall_64+0x309/0x430 [ 31.025383] ? SYSC_sendfile+0x320/0x320 [ 31.029433] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 31.034607] RIP: 0033:0x4457b9 [ 31.037770] RSP: 002b:00007f92d22bada8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 31.045453] RAX: ffffffffffffffda RBX: 00000000006dac74 RCX: 00000000004457b9 [ 31.052699] RDX: 0000000020000040 RSI: 0000000000000007 RDI: 0000000000000007 [ 31.059942] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 31.067191] R10: 7527fb3200000000 R11: 0000000000000246 R12: 00000000006dac70 [ 31.074441] R13: 0030656c69662f2e R14: 2f30656c69662f2e R15: 0000000000000009 [ 31.082135] Dumping ftrace buffer: [ 31.085656] (ftrace buffer empty) [ 31.089357] Kernel Offset: disabled [ 31.092968] Rebooting in 86400 seconds..