INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.35' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 30.930152] ================================================================== [ 30.937536] BUG: KMSAN: uninit-value in wp512_process_buffer+0x4ad5/0x4d90 [ 30.944525] CPU: 1 PID: 3577 Comm: syzkaller876087 Not tainted 4.16.0+ #84 [ 30.951512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.960840] Call Trace: [ 30.963406] dump_stack+0x185/0x1d0 [ 30.967014] ? wp512_process_buffer+0x4ad5/0x4d90 [ 30.971832] kmsan_report+0x142/0x240 [ 30.975611] __msan_warning_32+0x6c/0xb0 [ 30.979650] wp512_process_buffer+0x4ad5/0x4d90 [ 30.984297] ? save_stack_trace+0xa5/0xf0 [ 30.988422] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 30.993849] ? update_stack_state+0x885/0xa40 [ 30.998323] ? save_stack_trace+0xa5/0xf0 [ 31.002448] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 31.007874] ? update_stack_state+0x885/0xa40 [ 31.012347] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 31.017688] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 31.023113] ? update_stack_state+0x885/0xa40 [ 31.027587] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 31.032930] ? is_bpf_text_address+0xb4/0x4b0 [ 31.037402] ? __is_insn_slot_addr+0x198/0x1c0 [ 31.041961] ? kernel_text_address+0x34d/0x3a0 [ 31.046524] ? __kernel_text_address+0x34/0xe0 [ 31.051085] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 31.056514] ? __save_stack_trace+0x893/0xa80 [ 31.060993] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 31.066338] ? save_stack_trace+0xa5/0xf0 [ 31.070463] ? __irqentry_text_end+0x1fb47e/0x1fb47e [ 31.075541] ? kmsan_internal_chain_origin+0x1d3/0x210 [ 31.080794] ? __msan_chain_origin+0x69/0xc0 [ 31.085178] ? wp512_update+0x76c/0xc40 [ 31.089133] ? shash_async_update+0x290/0x360 [ 31.093604] ? hash_sendpage+0x904/0xe10 [ 31.097644] ? sock_sendpage+0x1de/0x2c0 [ 31.101684] ? pipe_to_sendpage+0x31b/0x430 [ 31.105984] ? __splice_from_pipe+0x49a/0xf30 [ 31.110456] ? generic_splice_sendpage+0x1c6/0x2a0 [ 31.115361] ? direct_splice_actor+0x19b/0x200 [ 31.119918] ? splice_direct_to_actor+0x764/0x1040 [ 31.124822] ? do_splice_direct+0x335/0x540 [ 31.129131] ? do_sendfile+0x1067/0x1e40 [ 31.133181] ? SYSC_sendfile64+0x1b3/0x300 [ 31.137395] ? SyS_sendfile64+0x64/0x90 [ 31.141347] ? do_syscall_64+0x309/0x430 [ 31.145383] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 31.150722] ? __msan_poison_alloca+0x15c/0x1d0 [ 31.155368] ? kmsan_set_origin_inline+0x6b/0x120 [ 31.160194] ? __msan_poison_alloca+0x15c/0x1d0 [ 31.164839] ? _cond_resched+0x3c/0xd0 [ 31.168703] ? apic_timer_interrupt+0xa/0x20 [ 31.173109] wp512_update+0x5f4/0xc40 [ 31.176902] ? wp512_init+0xf0/0xf0 [ 31.180516] shash_async_update+0x290/0x360 [ 31.184816] ? shash_async_init+0x270/0x270 [ 31.189122] hash_sendpage+0x904/0xe10 [ 31.192996] ? hash_recvmsg+0xd50/0xd50 [ 31.196953] sock_sendpage+0x1de/0x2c0 [ 31.200821] pipe_to_sendpage+0x31b/0x430 [ 31.204948] ? sock_fasync+0x2b0/0x2b0 [ 31.208814] ? propagate_umount+0x3a30/0x3a30 [ 31.213294] __splice_from_pipe+0x49a/0xf30 [ 31.217604] ? generic_splice_sendpage+0x2a0/0x2a0 [ 31.222515] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 31.227856] generic_splice_sendpage+0x1c6/0x2a0 [ 31.232588] ? iter_file_splice_write+0x1710/0x1710 [ 31.237583] ? iter_file_splice_write+0x1710/0x1710 [ 31.242576] direct_splice_actor+0x19b/0x200 [ 31.246962] splice_direct_to_actor+0x764/0x1040 [ 31.251693] ? do_splice_direct+0x540/0x540 [ 31.255994] ? security_file_permission+0x28f/0x4b0 [ 31.260991] ? rw_verify_area+0x35e/0x580 [ 31.265119] do_splice_direct+0x335/0x540 [ 31.269246] do_sendfile+0x1067/0x1e40 [ 31.273114] SYSC_sendfile64+0x1b3/0x300 [ 31.277160] SyS_sendfile64+0x64/0x90 [ 31.280936] do_syscall_64+0x309/0x430 [ 31.284800] ? SYSC_sendfile+0x320/0x320 [ 31.288837] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 31.294002] RIP: 0033:0x440c19 [ 31.297175] RSP: 002b:00000000007dff78 EFLAGS: 00000217 ORIG_RAX: 0000000000000028 [ 31.304856] RAX: ffffffffffffffda RBX: 00007ffd730aa310 RCX: 0000000000440c19 [ 31.312099] RDX: 0000000020145000 RSI: 0000000000000005 RDI: 0000000000000004 [ 31.319345] RBP: 0000000000000000 R08: 0000000120080522 R09: 0000000120080522 [ 31.326588] R10: 0000000000005abc R11: 0000000000000217 R12: 00000000004023b0 [ 31.333832] R13: 0000000000402440 R14: 0000000000000000 R15: 0000000000000000 [ 31.341085] [ 31.342690] Uninit was stored to memory at: [ 31.346989] kmsan_internal_chain_origin+0x12b/0x210 [ 31.352067] __msan_chain_origin+0x69/0xc0 [ 31.356277] wp512_update+0x76c/0xc40 [ 31.360052] shash_async_update+0x290/0x360 [ 31.364348] hash_sendpage+0x904/0xe10 [ 31.368213] sock_sendpage+0x1de/0x2c0 [ 31.372077] pipe_to_sendpage+0x31b/0x430 [ 31.376202] __splice_from_pipe+0x49a/0xf30 [ 31.380497] generic_splice_sendpage+0x1c6/0x2a0 [ 31.385232] direct_splice_actor+0x19b/0x200 [ 31.389616] splice_direct_to_actor+0x764/0x1040 [ 31.394346] do_splice_direct+0x335/0x540 [ 31.398467] do_sendfile+0x1067/0x1e40 [ 31.402330] SYSC_sendfile64+0x1b3/0x300 [ 31.406365] SyS_sendfile64+0x64/0x90 [ 31.410145] do_syscall_64+0x309/0x430 [ 31.414011] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 31.419181] Uninit was created at: [ 31.422694] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 31.427684] kmsan_alloc_page+0x82/0xe0 [ 31.431632] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 31.436362] alloc_pages_vma+0xcc8/0x1800 [ 31.440485] shmem_alloc_and_acct_page+0x6d5/0x1000 [ 31.445477] shmem_getpage_gfp+0x35db/0x5770 [ 31.449859] shmem_fallocate+0xde2/0x1610 [ 31.453979] vfs_fallocate+0x9dc/0xde0 [ 31.457839] SYSC_fallocate+0x119/0x1d0 [ 31.461786] SyS_fallocate+0x64/0x90 [ 31.465473] do_syscall_64+0x309/0x430 [ 31.469334] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 31.474512] ================================================================== [ 31.481842] Disabling lock debugging due to kernel taint [ 31.487264] Kernel panic - not syncing: panic_on_warn set ... [ 31.487264] [ 31.494603] CPU: 1 PID: 3577 Comm: syzkaller876087 Tainted: G B 4.16.0+ #84 [ 31.502894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 31.512222] Call Trace: [ 31.514787] dump_stack+0x185/0x1d0 [ 31.518392] panic+0x39d/0x940 [ 31.521571] ? wp512_process_buffer+0x4ad5/0x4d90 [ 31.526388] kmsan_report+0x238/0x240 [ 31.530164] __msan_warning_32+0x6c/0xb0 [ 31.534203] wp512_process_buffer+0x4ad5/0x4d90 [ 31.538850] ? save_stack_trace+0xa5/0xf0 [ 31.542972] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 31.548400] ? update_stack_state+0x885/0xa40 [ 31.552873] ? save_stack_trace+0xa5/0xf0 [ 31.556994] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 31.562425] ? update_stack_state+0x885/0xa40 [ 31.566899] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 31.572239] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 31.577672] ? update_stack_state+0x885/0xa40 [ 31.582143] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 31.587480] ? is_bpf_text_address+0xb4/0x4b0 [ 31.591951] ? __is_insn_slot_addr+0x198/0x1c0 [ 31.596519] ? kernel_text_address+0x34d/0x3a0 [ 31.601079] ? __kernel_text_address+0x34/0xe0 [ 31.605638] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 31.611065] ? __save_stack_trace+0x893/0xa80 [ 31.615538] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 31.620877] ? save_stack_trace+0xa5/0xf0 [ 31.625002] ? __irqentry_text_end+0x1fb47e/0x1fb47e [ 31.630086] ? kmsan_internal_chain_origin+0x1d3/0x210 [ 31.635339] ? __msan_chain_origin+0x69/0xc0 [ 31.639723] ? wp512_update+0x76c/0xc40 [ 31.643680] ? shash_async_update+0x290/0x360 [ 31.648148] ? hash_sendpage+0x904/0xe10 [ 31.652187] ? sock_sendpage+0x1de/0x2c0 [ 31.656224] ? pipe_to_sendpage+0x31b/0x430 [ 31.660522] ? __splice_from_pipe+0x49a/0xf30 [ 31.665000] ? generic_splice_sendpage+0x1c6/0x2a0 [ 31.669910] ? direct_splice_actor+0x19b/0x200 [ 31.674469] ? splice_direct_to_actor+0x764/0x1040 [ 31.679374] ? do_splice_direct+0x335/0x540 [ 31.683669] ? do_sendfile+0x1067/0x1e40 [ 31.687705] ? SYSC_sendfile64+0x1b3/0x300 [ 31.691914] ? SyS_sendfile64+0x64/0x90 [ 31.695860] ? do_syscall_64+0x309/0x430 [ 31.699897] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 31.705245] ? __msan_poison_alloca+0x15c/0x1d0 [ 31.709889] ? kmsan_set_origin_inline+0x6b/0x120 [ 31.714706] ? __msan_poison_alloca+0x15c/0x1d0 [ 31.719348] ? _cond_resched+0x3c/0xd0 [ 31.723210] ? apic_timer_interrupt+0xa/0x20 [ 31.727598] wp512_update+0x5f4/0xc40 [ 31.731378] ? wp512_init+0xf0/0xf0 [ 31.734980] shash_async_update+0x290/0x360 [ 31.739276] ? shash_async_init+0x270/0x270 [ 31.743570] hash_sendpage+0x904/0xe10 [ 31.747434] ? hash_recvmsg+0xd50/0xd50 [ 31.751384] sock_sendpage+0x1de/0x2c0 [ 31.755256] pipe_to_sendpage+0x31b/0x430 [ 31.759378] ? sock_fasync+0x2b0/0x2b0 [ 31.763243] ? propagate_umount+0x3a30/0x3a30 [ 31.767714] __splice_from_pipe+0x49a/0xf30 [ 31.772015] ? generic_splice_sendpage+0x2a0/0x2a0 [ 31.776933] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 31.782274] generic_splice_sendpage+0x1c6/0x2a0 [ 31.787015] ? iter_file_splice_write+0x1710/0x1710 [ 31.792021] ? iter_file_splice_write+0x1710/0x1710 [ 31.797032] direct_splice_actor+0x19b/0x200 [ 31.801422] splice_direct_to_actor+0x764/0x1040 [ 31.806156] ? do_splice_direct+0x540/0x540 [ 31.810454] ? security_file_permission+0x28f/0x4b0 [ 31.815446] ? rw_verify_area+0x35e/0x580 [ 31.819570] do_splice_direct+0x335/0x540 [ 31.823696] do_sendfile+0x1067/0x1e40 [ 31.827564] SYSC_sendfile64+0x1b3/0x300 [ 31.831609] SyS_sendfile64+0x64/0x90 [ 31.835386] do_syscall_64+0x309/0x430 [ 31.839251] ? SYSC_sendfile+0x320/0x320 [ 31.843288] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 31.848451] RIP: 0033:0x440c19 [ 31.851614] RSP: 002b:00000000007dff78 EFLAGS: 00000217 ORIG_RAX: 0000000000000028 [ 31.859294] RAX: ffffffffffffffda RBX: 00007ffd730aa310 RCX: 0000000000440c19 [ 31.866542] RDX: 0000000020145000 RSI: 0000000000000005 RDI: 0000000000000004 [ 31.873787] RBP: 0000000000000000 R08: 0000000120080522 R09: 0000000120080522 [ 31.881037] R10: 0000000000005abc R11: 0000000000000217 R12: 00000000004023b0 [ 31.888281] R13: 0000000000402440 R14: 0000000000000000 R15: 0000000000000000 [ 31.896025] Dumping ftrace buffer: [ 31.899542] (ftrace buffer empty) [ 31.903223] Kernel Offset: disabled [ 31.906823] Rebooting in 86400 seconds..