INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.5' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 30.740204] ================================================================== [ 30.747585] BUG: KMSAN: uninit-value in __save_stack_trace+0x5b2/0xa80 [ 30.754230] CPU: 1 PID: 3537 Comm: syzkaller846494 Not tainted 4.16.0+ #82 [ 30.761211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.770544] Call Trace: [ 30.773124] dump_stack+0x185/0x1d0 [ 30.776728] ? __save_stack_trace+0x5b2/0xa80 [ 30.781200] kmsan_report+0x142/0x240 [ 30.784978] __msan_warning_32+0x6c/0xb0 [ 30.789012] ? save_stack_trace+0xa5/0xf0 [ 30.793136] __save_stack_trace+0x5b2/0xa80 [ 30.797432] ? save_stack_trace+0xa5/0xf0 [ 30.801558] ? kmsan_set_origin+0x9e/0x160 [ 30.805785] save_stack_trace+0xa5/0xf0 [ 30.809735] ? do_splice_direct+0x335/0x540 [ 30.814029] kmsan_internal_chain_origin+0x12b/0x210 [ 30.819109] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 30.824535] ? kmsan_set_origin_inline+0x6b/0x120 [ 30.829357] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 30.834782] ? seq_putc+0xf4/0x1d0 [ 30.838303] ? proc_pid_wchan+0x19b/0x250 [ 30.842428] ? __msan_poison_alloca+0x15c/0x1d0 [ 30.847079] ? seq_read+0xc7d/0x2260 [ 30.850768] ? get_pid_task+0x3b/0x190 [ 30.854631] kmsan_memcpy_origins+0x11d/0x170 [ 30.859114] kmsan_copy_to_user+0x132/0x160 [ 30.863424] seq_read+0x1cc9/0x2260 [ 30.867036] do_iter_read+0x880/0xd70 [ 30.870820] ? seq_open+0x360/0x360 [ 30.874993] vfs_readv+0x1ec/0x260 [ 30.878516] default_file_splice_read+0xa9a/0x1120 [ 30.883430] ? security_file_permission+0x473/0x4b0 [ 30.888426] ? rw_verify_area+0x35e/0x580 [ 30.892556] ? SYSC_tee+0x13d0/0x13d0 [ 30.896340] splice_direct_to_actor+0x4c6/0x1040 [ 30.901074] ? do_splice_direct+0x540/0x540 [ 30.905369] ? security_file_permission+0x28f/0x4b0 [ 30.910372] ? rw_verify_area+0x35e/0x580 [ 30.914497] do_splice_direct+0x335/0x540 [ 30.918620] do_sendfile+0x1067/0x1e40 [ 30.922490] SYSC_sendfile64+0x1b3/0x300 [ 30.926528] SyS_sendfile64+0x64/0x90 [ 30.930305] do_syscall_64+0x309/0x430 [ 30.934170] ? SYSC_sendfile+0x320/0x320 [ 30.938209] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 30.943376] RIP: 0033:0x4401d9 [ 30.946552] RSP: 002b:00007fff435d8938 EFLAGS: 00000217 ORIG_RAX: 0000000000000028 [ 30.954239] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004401d9 [ 30.961485] RDX: 0000000020a2effc RSI: 0000000000000004 RDI: 0000000000000005 [ 30.968731] RBP: 00000000006ca018 R08: 65732f636f72702f R09: 65732f636f72702f [ 30.975984] R10: 0000000000001000 R11: 0000000000000217 R12: 0000000000401a60 [ 30.983231] R13: 0000000000401af0 R14: 0000000000000000 R15: 0000000000000000 [ 30.990479] [ 30.992085] Uninit was stored to memory at: [ 30.996394] kmsan_internal_chain_origin+0x12b/0x210 [ 31.001471] __msan_chain_origin+0x69/0xc0 [ 31.005682] save_stack_trace+0xe4/0xf0 [ 31.009631] kmsan_internal_chain_origin+0x12b/0x210 [ 31.014708] kmsan_memcpy_origins+0x11d/0x170 [ 31.019178] kmsan_copy_to_user+0x132/0x160 [ 31.023473] seq_read+0x1cc9/0x2260 [ 31.027074] do_iter_read+0x880/0xd70 [ 31.030847] vfs_readv+0x1ec/0x260 [ 31.034362] default_file_splice_read+0xa9a/0x1120 [ 31.039264] splice_direct_to_actor+0x4c6/0x1040 [ 31.043995] do_splice_direct+0x335/0x540 [ 31.048124] do_sendfile+0x1067/0x1e40 [ 31.051989] SYSC_sendfile64+0x1b3/0x300 [ 31.056035] SyS_sendfile64+0x64/0x90 [ 31.059819] do_syscall_64+0x309/0x430 [ 31.063682] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 31.068841] Local variable description: ----flags.i.i.i@rcu_all_qs [ 31.075128] Variable was created at: [ 31.078834] rcu_all_qs+0x32/0x1f0 [ 31.082346] _cond_resched+0x3c/0xd0 [ 31.086026] ================================================================== [ 31.093354] Disabling lock debugging due to kernel taint [ 31.098775] Kernel panic - not syncing: panic_on_warn set ... [ 31.098775] [ 31.106114] CPU: 1 PID: 3537 Comm: syzkaller846494 Tainted: G B 4.16.0+ #82 [ 31.114397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 31.123722] Call Trace: [ 31.126288] dump_stack+0x185/0x1d0 [ 31.129890] panic+0x39d/0x940 [ 31.133069] ? __save_stack_trace+0x5b2/0xa80 [ 31.137536] kmsan_report+0x238/0x240 [ 31.141313] __msan_warning_32+0x6c/0xb0 [ 31.145352] ? save_stack_trace+0xa5/0xf0 [ 31.149475] __save_stack_trace+0x5b2/0xa80 [ 31.153775] ? save_stack_trace+0xa5/0xf0 [ 31.157902] ? kmsan_set_origin+0x9e/0x160 [ 31.162116] save_stack_trace+0xa5/0xf0 [ 31.166066] ? do_splice_direct+0x335/0x540 [ 31.170362] kmsan_internal_chain_origin+0x12b/0x210 [ 31.175441] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 31.180866] ? kmsan_set_origin_inline+0x6b/0x120 [ 31.185685] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 31.191123] ? seq_putc+0xf4/0x1d0 [ 31.194641] ? proc_pid_wchan+0x19b/0x250 [ 31.198765] ? __msan_poison_alloca+0x15c/0x1d0 [ 31.203412] ? seq_read+0xc7d/0x2260 [ 31.207103] ? get_pid_task+0x3b/0x190 [ 31.210963] kmsan_memcpy_origins+0x11d/0x170 [ 31.215432] kmsan_copy_to_user+0x132/0x160 [ 31.219729] seq_read+0x1cc9/0x2260 [ 31.223355] do_iter_read+0x880/0xd70 [ 31.227140] ? seq_open+0x360/0x360 [ 31.230743] vfs_readv+0x1ec/0x260 [ 31.234264] default_file_splice_read+0xa9a/0x1120 [ 31.239175] ? security_file_permission+0x473/0x4b0 [ 31.244166] ? rw_verify_area+0x35e/0x580 [ 31.248290] ? SYSC_tee+0x13d0/0x13d0 [ 31.252074] splice_direct_to_actor+0x4c6/0x1040 [ 31.256813] ? do_splice_direct+0x540/0x540 [ 31.261111] ? security_file_permission+0x28f/0x4b0 [ 31.266101] ? rw_verify_area+0x35e/0x580 [ 31.270235] do_splice_direct+0x335/0x540 [ 31.274359] do_sendfile+0x1067/0x1e40 [ 31.278226] SYSC_sendfile64+0x1b3/0x300 [ 31.282273] SyS_sendfile64+0x64/0x90 [ 31.286052] do_syscall_64+0x309/0x430 [ 31.289919] ? SYSC_sendfile+0x320/0x320 [ 31.293960] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 31.299124] RIP: 0033:0x4401d9 [ 31.302286] RSP: 002b:00007fff435d8938 EFLAGS: 00000217 ORIG_RAX: 0000000000000028 [ 31.309970] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004401d9 [ 31.317216] RDX: 0000000020a2effc RSI: 0000000000000004 RDI: 0000000000000005 [ 31.324461] RBP: 00000000006ca018 R08: 65732f636f72702f R09: 65732f636f72702f [ 31.331705] R10: 0000000000001000 R11: 0000000000000217 R12: 0000000000401a60 [ 31.338949] R13: 0000000000401af0 R14: 0000000000000000 R15: 0000000000000000 [ 31.346626] Dumping ftrace buffer: [ 31.350141] (ftrace buffer empty) [ 31.353823] Kernel Offset: disabled [ 31.357421] Rebooting in 86400 seconds..