INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.13' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 30.433651] ================================================================== [ 30.441191] WARNING: memcpy-param-overlap in generic_perform_write+0x4c6/0x990 [ 30.448689] __msan_memcpy(ffff8801d4e46000, ffff8801d4e4605f, 4001) [ 30.455196] CPU: 1 PID: 3568 Comm: syzkaller972065 Not tainted 4.16.0+ #83 [ 30.462202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.471563] Call Trace: [ 30.474168] dump_stack+0x185/0x1d0 [ 30.477792] __msan_memcpy+0x90/0x1f0 [ 30.481591] ================================================================== [ 30.488946] BUG: KMSAN: uninit-value in kernel_text_address+0x248/0x3a0 [ 30.495692] CPU: 1 PID: 3568 Comm: syzkaller972065 Not tainted 4.16.0+ #83 [ 30.502698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.512043] Call Trace: [ 30.514631] dump_stack+0x14a/0x1d0 [ 30.518248] ? kernel_text_address+0x248/0x3a0 [ 30.522824] kmsan_report+0x142/0x240 [ 30.526634] __msan_warning_32+0x6c/0xb0 [ 30.530711] kernel_text_address+0x248/0x3a0 [ 30.535132] ? iov_iter_copy_from_user_atomic+0xb04/0x17d0 [ 30.540763] ? iov_iter_copy_from_user_atomic+0xb04/0x17d0 [ 30.546371] __kernel_text_address+0x34/0xe0 [ 30.550759] ? iov_iter_copy_from_user_atomic+0xb04/0x17d0 [ 30.556360] show_trace_log_lvl+0x954/0x1030 [ 30.560745] ? iov_iter_copy_from_user_atomic+0xb04/0x17d0 [ 30.566345] ? iov_iter_copy_from_user_atomic+0xb04/0x17d0 [ 30.571947] show_stack+0xfc/0x150 [ 30.575467] ? print_worker_info+0x1b0/0x660 [ 30.579853] dump_stack+0x185/0x1d0 [ 30.583458] __msan_memcpy+0x90/0x1f0 [ 30.587247] iov_iter_copy_from_user_atomic+0xb04/0x17d0 [ 30.592676] ? block_write_begin+0x1d1/0x3a0 [ 30.597078] generic_perform_write+0x4c6/0x990 [ 30.601650] __generic_file_write_iter+0x43b/0x990 [ 30.606560] blkdev_write_iter+0x3a8/0x5f0 [ 30.610777] ? __blkdev_put+0xc80/0xc80 [ 30.614729] do_iter_readv_writev+0x7bb/0x970 [ 30.619210] ? __blkdev_put+0xc80/0xc80 [ 30.623164] do_iter_write+0x30d/0xd40 [ 30.627030] ? kmsan_set_origin_inline+0x6b/0x120 [ 30.631856] ? __blkdev_put+0xc80/0xc80 [ 30.635807] vfs_iter_write+0x118/0x180 [ 30.639762] iter_file_splice_write+0xbc3/0x1710 [ 30.644501] ? splice_from_pipe+0x2c0/0x2c0 [ 30.648797] ? splice_from_pipe+0x2c0/0x2c0 [ 30.653094] direct_splice_actor+0x19b/0x200 [ 30.657480] splice_direct_to_actor+0x764/0x1040 [ 30.662213] ? do_splice_direct+0x540/0x540 [ 30.666514] ? security_file_permission+0x28f/0x4b0 [ 30.671509] ? rw_verify_area+0x35e/0x580 [ 30.675635] do_splice_direct+0x335/0x540 [ 30.679761] do_sendfile+0x1067/0x1e40 [ 30.683628] SYSC_sendfile64+0x1b3/0x300 [ 30.687665] SyS_sendfile64+0x64/0x90 [ 30.691439] do_syscall_64+0x309/0x430 [ 30.695315] ? SYSC_sendfile+0x320/0x320 [ 30.699353] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 30.704519] RIP: 0033:0x443e19 [ 30.707682] RSP: 002b:00007fff16d070e8 EFLAGS: 00000217 ORIG_RAX: 0000000000000028 [ 30.715364] RAX: ffffffffffffffda RBX: 00000000004002e0 RCX: 0000000000443e19 [ 30.722609] RDX: 0000000020000080 RSI: 0000000000000003 RDI: 0000000000000003 [ 30.729856] RBP: 00000000006ce018 R08: 00000000004002e0 R09: 00000000004002e0 [ 30.737102] R10: 0000000102000004 R11: 0000000000000217 R12: 0000000000401ac0 [ 30.744346] R13: 0000000000401b50 R14: 0000000000000000 R15: 0000000000000000 [ 30.751601] [ 30.753205] Local variable description: ----b@submit_bio [ 30.758625] Variable was created at: [ 30.762320] submit_bio+0x47/0x720 [ 30.765837] mpage_readpages+0x8f3/0x9b0 [ 30.769874] ================================================================== [ 30.777226] Disabling lock debugging due to kernel taint [ 30.782680] Kernel panic - not syncing: panic_on_warn set ... [ 30.782680] [ 30.790029] CPU: 1 PID: 3568 Comm: syzkaller972065 Tainted: G B 4.16.0+ #83 [ 30.798327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.807672] Call Trace: [ 30.810267] dump_stack+0x14a/0x1d0 [ 30.813882] panic+0x39d/0x940 [ 30.817076] ? kernel_text_address+0x248/0x3a0 [ 30.821643] kmsan_report+0x238/0x240 [ 30.825427] __msan_warning_32+0x6c/0xb0 [ 30.829468] kernel_text_address+0x248/0x3a0 [ 30.833861] ? iov_iter_copy_from_user_atomic+0xb04/0x17d0 [ 30.839468] ? iov_iter_copy_from_user_atomic+0xb04/0x17d0 [ 30.845075] __kernel_text_address+0x34/0xe0 [ 30.849463] ? iov_iter_copy_from_user_atomic+0xb04/0x17d0 [ 30.855066] show_trace_log_lvl+0x954/0x1030 [ 30.859453] ? iov_iter_copy_from_user_atomic+0xb04/0x17d0 [ 30.865056] ? iov_iter_copy_from_user_atomic+0xb04/0x17d0 [ 30.870663] show_stack+0xfc/0x150 [ 30.874182] ? print_worker_info+0x1b0/0x660 [ 30.878576] dump_stack+0x185/0x1d0 [ 30.882187] __msan_memcpy+0x90/0x1f0 [ 30.885977] iov_iter_copy_from_user_atomic+0xb04/0x17d0 [ 30.891406] ? block_write_begin+0x1d1/0x3a0 [ 30.895797] generic_perform_write+0x4c6/0x990 [ 30.900363] __generic_file_write_iter+0x43b/0x990 [ 30.905277] blkdev_write_iter+0x3a8/0x5f0 [ 30.909495] ? __blkdev_put+0xc80/0xc80 [ 30.913445] do_iter_readv_writev+0x7bb/0x970 [ 30.917921] ? __blkdev_put+0xc80/0xc80 [ 30.921944] do_iter_write+0x30d/0xd40 [ 30.925843] ? kmsan_set_origin_inline+0x6b/0x120 [ 30.930704] ? __blkdev_put+0xc80/0xc80 [ 30.934687] vfs_iter_write+0x118/0x180 [ 30.938659] iter_file_splice_write+0xbc3/0x1710 [ 30.943409] ? splice_from_pipe+0x2c0/0x2c0 [ 30.947736] ? splice_from_pipe+0x2c0/0x2c0 [ 30.952070] direct_splice_actor+0x19b/0x200 [ 30.956489] splice_direct_to_actor+0x764/0x1040 [ 30.961236] ? do_splice_direct+0x540/0x540 [ 30.965554] ? security_file_permission+0x28f/0x4b0 [ 30.970578] ? rw_verify_area+0x35e/0x580 [ 30.974740] do_splice_direct+0x335/0x540 [ 30.978874] do_sendfile+0x1067/0x1e40 [ 30.982748] SYSC_sendfile64+0x1b3/0x300 [ 30.986787] SyS_sendfile64+0x64/0x90 [ 30.990563] do_syscall_64+0x309/0x430 [ 30.994428] ? SYSC_sendfile+0x320/0x320 [ 30.998472] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 31.003637] RIP: 0033:0x443e19 [ 31.006802] RSP: 002b:00007fff16d070e8 EFLAGS: 00000217 ORIG_RAX: 0000000000000028 [ 31.014482] RAX: ffffffffffffffda RBX: 00000000004002e0 RCX: 0000000000443e19 [ 31.021728] RDX: 0000000020000080 RSI: 0000000000000003 RDI: 0000000000000003 [ 31.028975] RBP: 00000000006ce018 R08: 00000000004002e0 R09: 00000000004002e0 [ 31.036240] R10: 0000000102000004 R11: 0000000000000217 R12: 0000000000401ac0 [ 31.043488] R13: 0000000000401b50 R14: 0000000000000000 R15: 0000000000000000 [ 31.051267] Dumping ftrace buffer: [ 31.054790] (ftrace buffer empty) [ 31.058479] Kernel Offset: disabled [ 31.062082] Rebooting in 86400 seconds..