INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.58' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 30.763951] ================================================================== [ 30.771353] BUG: KMSAN: uninit-value in _copy_to_iter+0x46d/0x28f0 [ 30.777657] CPU: 1 PID: 3576 Comm: syzkaller424635 Not tainted 4.16.0+ #83 [ 30.784646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.793986] Call Trace: [ 30.796555] dump_stack+0x185/0x1d0 [ 30.800159] ? kmsan_internal_check_memory+0x106/0x1d0 [ 30.805409] kmsan_report+0x142/0x240 [ 30.809188] kmsan_internal_check_memory+0x125/0x1d0 [ 30.814268] kmsan_copy_to_user+0x69/0x160 [ 30.818480] ? _copy_to_iter+0x95/0x28f0 [ 30.822516] _copy_to_iter+0x46d/0x28f0 [ 30.826465] ? ghash_async_final+0x26d/0x290 [ 30.830848] ? crypto_ahash_op+0x89a/0xc10 [ 30.835061] ? ghash_async_update+0x2b0/0x2b0 [ 30.839542] hash_recvmsg+0x88e/0xd50 [ 30.843319] hash_recvmsg_nokey+0x129/0x160 [ 30.847620] ? hash_sendmsg_nokey+0x140/0x140 [ 30.852092] sock_read_iter+0x405/0x480 [ 30.856050] ? kernel_sock_ip_overhead+0x350/0x350 [ 30.860956] __vfs_read+0x6fb/0x8e0 [ 30.864560] vfs_read+0x36c/0x6c0 [ 30.867988] SYSC_read+0x172/0x360 [ 30.871504] SyS_read+0x55/0x80 [ 30.874757] do_syscall_64+0x309/0x430 [ 30.878621] ? vfs_write+0x8d0/0x8d0 [ 30.882313] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 30.887475] RIP: 0033:0x440c89 [ 30.890636] RSP: 002b:00000000007dff78 EFLAGS: 00000207 ORIG_RAX: 0000000000000000 [ 30.898316] RAX: ffffffffffffffda RBX: 00007ffdfcb17250 RCX: 0000000000440c89 [ 30.905558] RDX: 00000000000000a6 RSI: 00000000200000c0 RDI: 0000000000000004 [ 30.912800] RBP: 0000000000000000 R08: 0000000120080522 R09: 0000000120080522 [ 30.920044] R10: 0000000120080522 R11: 0000000000000207 R12: 0000000000402420 [ 30.927293] R13: 00000000004024b0 R14: 0000000000000000 R15: 0000000000000000 [ 30.934541] [ 30.936143] Uninit was stored to memory at: [ 30.940441] kmsan_internal_chain_origin+0x12b/0x210 [ 30.945515] kmsan_memcpy_origins+0x11d/0x170 [ 30.949982] __msan_memcpy+0x19f/0x1f0 [ 30.953842] ghash_final+0x168/0x1d0 [ 30.957527] crypto_shash_final+0x198/0x1c0 [ 30.961819] ghash_async_final+0x26d/0x290 [ 30.966034] crypto_ahash_op+0x89a/0xc10 [ 30.970076] crypto_ahash_final+0x8c/0xb0 [ 30.974195] hash_recvmsg+0x56d/0xd50 [ 30.977971] hash_recvmsg_nokey+0x129/0x160 [ 30.982354] sock_read_iter+0x405/0x480 [ 30.986301] __vfs_read+0x6fb/0x8e0 [ 30.989904] vfs_read+0x36c/0x6c0 [ 30.993328] SYSC_read+0x172/0x360 [ 30.996839] SyS_read+0x55/0x80 [ 31.000091] do_syscall_64+0x309/0x430 [ 31.003952] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 31.009110] Uninit was stored to memory at: [ 31.013402] kmsan_internal_chain_origin+0x12b/0x210 [ 31.018475] __msan_chain_origin+0x69/0xc0 [ 31.022682] ghash_update+0xfc6/0x1060 [ 31.026540] shash_ahash_update+0x293/0x360 [ 31.030833] ghash_async_update+0x294/0x2b0 [ 31.035127] hash_sendpage+0x904/0xe10 [ 31.038997] hash_sendpage_nokey+0x153/0x180 [ 31.043390] sock_sendpage+0x1de/0x2c0 [ 31.047252] pipe_to_sendpage+0x31b/0x430 [ 31.051373] __splice_from_pipe+0x49a/0xf30 [ 31.055669] generic_splice_sendpage+0x1c6/0x2a0 [ 31.060397] direct_splice_actor+0x19b/0x200 [ 31.064780] splice_direct_to_actor+0x764/0x1040 [ 31.069510] do_splice_direct+0x335/0x540 [ 31.073628] do_sendfile+0x1067/0x1e40 [ 31.077488] SYSC_sendfile64+0x1b3/0x300 [ 31.081522] SyS_sendfile64+0x64/0x90 [ 31.085296] do_syscall_64+0x309/0x430 [ 31.089157] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 31.094313] Uninit was created at: [ 31.097830] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 31.102817] kmsan_alloc_page+0x82/0xe0 [ 31.106765] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 31.111500] alloc_pages_vma+0xcc8/0x1800 [ 31.115623] shmem_alloc_and_acct_page+0x6d5/0x1000 [ 31.120612] shmem_getpage_gfp+0x35db/0x5770 [ 31.124992] shmem_fallocate+0xde2/0x1610 [ 31.129118] vfs_fallocate+0x9dc/0xde0 [ 31.132977] SYSC_fallocate+0x119/0x1d0 [ 31.136926] SyS_fallocate+0x64/0x90 [ 31.140612] do_syscall_64+0x309/0x430 [ 31.144475] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 31.149633] [ 31.151232] Bytes 0-3 of 16 are uninitialized [ 31.155696] ================================================================== [ 31.163027] Disabling lock debugging due to kernel taint [ 31.168453] Kernel panic - not syncing: panic_on_warn set ... [ 31.168453] [ 31.175792] CPU: 1 PID: 3576 Comm: syzkaller424635 Tainted: G B 4.16.0+ #83 [ 31.184083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 31.193419] Call Trace: [ 31.195999] dump_stack+0x185/0x1d0 [ 31.199608] panic+0x39d/0x940 [ 31.202788] ? kmsan_internal_check_memory+0x106/0x1d0 [ 31.208043] kmsan_report+0x238/0x240 [ 31.211821] kmsan_internal_check_memory+0x125/0x1d0 [ 31.216900] kmsan_copy_to_user+0x69/0x160 [ 31.221110] ? _copy_to_iter+0x95/0x28f0 [ 31.225144] _copy_to_iter+0x46d/0x28f0 [ 31.229091] ? ghash_async_final+0x26d/0x290 [ 31.233476] ? crypto_ahash_op+0x89a/0xc10 [ 31.237693] ? ghash_async_update+0x2b0/0x2b0 [ 31.242166] hash_recvmsg+0x88e/0xd50 [ 31.245943] hash_recvmsg_nokey+0x129/0x160 [ 31.250240] ? hash_sendmsg_nokey+0x140/0x140 [ 31.254714] sock_read_iter+0x405/0x480 [ 31.258668] ? kernel_sock_ip_overhead+0x350/0x350 [ 31.263574] __vfs_read+0x6fb/0x8e0 [ 31.267180] vfs_read+0x36c/0x6c0 [ 31.270612] SYSC_read+0x172/0x360 [ 31.274129] SyS_read+0x55/0x80 [ 31.277384] do_syscall_64+0x309/0x430 [ 31.281247] ? vfs_write+0x8d0/0x8d0 [ 31.284939] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 31.290101] RIP: 0033:0x440c89 [ 31.293270] RSP: 002b:00000000007dff78 EFLAGS: 00000207 ORIG_RAX: 0000000000000000 [ 31.300958] RAX: ffffffffffffffda RBX: 00007ffdfcb17250 RCX: 0000000000440c89 [ 31.308212] RDX: 00000000000000a6 RSI: 00000000200000c0 RDI: 0000000000000004 [ 31.315464] RBP: 0000000000000000 R08: 0000000120080522 R09: 0000000120080522 [ 31.322711] R10: 0000000120080522 R11: 0000000000000207 R12: 0000000000402420 [ 31.329954] R13: 00000000004024b0 R14: 0000000000000000 R15: 0000000000000000 [ 31.337627] Dumping ftrace buffer: [ 31.341156] (ftrace buffer empty) [ 31.344837] Kernel Offset: disabled [ 31.348437] Rebooting in 86400 seconds..