INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.18' (ECDSA) to the list of known hosts. executing program executing program executing program syzkaller login: [ 30.741150] FAULT_INJECTION: forcing a failure. [ 30.741150] name failslab, interval 1, probability 0, space 0, times 1 [ 30.749871] FAULT_INJECTION: forcing a failure. [ 30.749871] name failslab, interval 1, probability 0, space 0, times 1 [ 30.752481] CPU: 0 PID: 3583 Comm: syzkaller637566 Not tainted 4.16.0+ #83 [ 30.752522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.780160] Call Trace: [ 30.782778] dump_stack+0x185/0x1d0 [ 30.786425] should_fail+0x87b/0xab0 [ 30.790140] ================================================================== [ 30.797496] BUG: KMSAN: uninit-value in kernel_text_address+0x248/0x3a0 [ 30.804237] CPU: 0 PID: 3583 Comm: syzkaller637566 Not tainted 4.16.0+ #83 [ 30.811233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.820573] Call Trace: [ 30.823156] dump_stack+0x14a/0x1d0 [ 30.826775] ? kernel_text_address+0x248/0x3a0 [ 30.831348] kmsan_report+0x142/0x240 [ 30.835149] __msan_warning_32+0x6c/0xb0 [ 30.839201] kernel_text_address+0x248/0x3a0 [ 30.843600] __kernel_text_address+0x34/0xe0 [ 30.848005] show_trace_log_lvl+0x954/0x1030 [ 30.852408] ? should_failslab+0x279/0x2a0 [ 30.856638] show_stack+0xfc/0x150 [ 30.860167] ? print_worker_info+0x1b0/0x660 [ 30.864563] dump_stack+0x185/0x1d0 [ 30.868179] should_fail+0x87b/0xab0 [ 30.871884] should_failslab+0x279/0x2a0 [ 30.875935] __kmalloc+0xc2/0x350 [ 30.879378] ? tcp_sendmsg_locked+0xc1/0x6d20 [ 30.883862] ? tcp_sendmsg_locked+0x655c/0x6d20 [ 30.888526] tcp_sendmsg_locked+0x655c/0x6d20 [ 30.893016] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 30.898464] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 30.903903] ? kmsan_set_origin_inline+0x6b/0x120 [ 30.908737] ? local_bh_enable+0x36/0x40 [ 30.912786] ? __local_bh_enable_ip+0x3b/0x140 [ 30.917359] ? local_bh_enable+0x36/0x40 [ 30.921419] ? local_bh_enable+0x36/0x40 [ 30.925484] tcp_sendmsg+0xb2/0x100 [ 30.929106] ? tcp_sendmsg_locked+0x6d20/0x6d20 [ 30.933778] inet_sendmsg+0x48d/0x740 [ 30.937568] ? security_socket_sendmsg+0x9e/0x210 [ 30.942400] ? inet_getname+0x500/0x500 [ 30.946364] SYSC_sendto+0x6c3/0x7e0 [ 30.950064] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 30.955499] ? prepare_exit_to_usermode+0x149/0x3a0 [ 30.960509] SyS_sendto+0x8a/0xb0 [ 30.963952] do_syscall_64+0x309/0x430 [ 30.967832] ? SYSC_getpeername+0x560/0x560 [ 30.972142] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 30.977317] RIP: 0033:0x440979 [ 30.980493] RSP: 002b:00007fff2c3e1348 EFLAGS: 00000212 ORIG_RAX: 000000000000002c [ 30.988194] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000440979 [ 30.995452] RDX: 0000000000000101 RSI: 000000002084c000 RDI: 0000000000000003 [ 31.002721] RBP: 00007fff2c3e1360 R08: 000000002006ffe4 R09: 000000000000001c [ 31.009981] R10: 0000000020000000 R11: 0000000000000212 R12: ffffffffffffffff [ 31.017270] R13: 0100000000000000 R14: 0001000000000001 R15: 0000000000000004 [ 31.024535] [ 31.026150] Local variable description: ----flags.i.i.i@rcu_all_qs [ 31.032453] Variable was created at: [ 31.036166] rcu_all_qs+0x32/0x1f0 [ 31.039692] _cond_resched+0x3c/0xd0 [ 31.043382] ================================================================== [ 31.050721] Disabling lock debugging due to kernel taint [ 31.056153] Kernel panic - not syncing: panic_on_warn set ... [ 31.056153] [ 31.063513] CPU: 0 PID: 3583 Comm: syzkaller637566 Tainted: G B 4.16.0+ #83 [ 31.071817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 31.081166] Call Trace: [ 31.083750] dump_stack+0x14a/0x1d0 [ 31.087369] panic+0x39d/0x940 [ 31.090568] ? kernel_text_address+0x248/0x3a0 [ 31.095139] kmsan_report+0x238/0x240 [ 31.098937] __msan_warning_32+0x6c/0xb0 [ 31.102995] kernel_text_address+0x248/0x3a0 [ 31.107402] __kernel_text_address+0x34/0xe0 [ 31.111806] show_trace_log_lvl+0x954/0x1030 [ 31.116207] ? should_failslab+0x279/0x2a0 [ 31.120437] show_stack+0xfc/0x150 [ 31.123967] ? print_worker_info+0x1b0/0x660 [ 31.128369] dump_stack+0x185/0x1d0 [ 31.131991] should_fail+0x87b/0xab0 [ 31.135703] should_failslab+0x279/0x2a0 [ 31.139768] __kmalloc+0xc2/0x350 [ 31.143232] ? tcp_sendmsg_locked+0xc1/0x6d20 [ 31.147725] ? tcp_sendmsg_locked+0x655c/0x6d20 [ 31.152394] tcp_sendmsg_locked+0x655c/0x6d20 [ 31.156889] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 31.162343] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 31.167787] ? kmsan_set_origin_inline+0x6b/0x120 [ 31.172635] ? local_bh_enable+0x36/0x40 [ 31.176699] ? __local_bh_enable_ip+0x3b/0x140 [ 31.181272] ? local_bh_enable+0x36/0x40 [ 31.185329] ? local_bh_enable+0x36/0x40 [ 31.189383] tcp_sendmsg+0xb2/0x100 [ 31.194135] ? tcp_sendmsg_locked+0x6d20/0x6d20 [ 31.198790] inet_sendmsg+0x48d/0x740 [ 31.202584] ? security_socket_sendmsg+0x9e/0x210 [ 31.207422] ? inet_getname+0x500/0x500 [ 31.211391] SYSC_sendto+0x6c3/0x7e0 [ 31.215101] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 31.220546] ? prepare_exit_to_usermode+0x149/0x3a0 [ 31.225561] SyS_sendto+0x8a/0xb0 [ 31.229006] do_syscall_64+0x309/0x430 [ 31.232891] ? SYSC_getpeername+0x560/0x560 [ 31.237204] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 31.242387] RIP: 0033:0x440979 [ 31.245565] RSP: 002b:00007fff2c3e1348 EFLAGS: 00000212 ORIG_RAX: 000000000000002c [ 31.253262] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000440979 [ 31.260522] RDX: 0000000000000101 RSI: 000000002084c000 RDI: 0000000000000003 [ 31.267784] RBP: 00007fff2c3e1360 R08: 000000002006ffe4 R09: 000000000000001c [ 31.275053] R10: 0000000020000000 R11: 0000000000000212 R12: ffffffffffffffff [ 31.282313] R13: 0100000000000000 R14: 0001000000000001 R15: 0000000000000004 [ 31.290099] Dumping ftrace buffer: [ 31.293712] (ftrace buffer empty) [ 31.297399] Kernel Offset: disabled [ 31.301006] Rebooting in 86400 seconds..