INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.40' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 33.020463] ================================================================== [ 33.027948] WARNING: memcpy-param-overlap in generic_perform_write+0x4c6/0x990 [ 33.035377] __msan_memcpy(ffff8801b3b95001, ffff8801b3b95000, 683) [ 33.041783] CPU: 1 PID: 3576 Comm: syzkaller260758 Not tainted 4.16.0+ #82 [ 33.048794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 33.058141] Call Trace: [ 33.060819] dump_stack+0x185/0x1d0 [ 33.064450] ? do_journal_get_write_access+0x330/0x330 [ 33.069721] __msan_memcpy+0x90/0x1f0 [ 33.073518] iov_iter_copy_from_user_atomic+0xb04/0x17d0 [ 33.078976] generic_perform_write+0x4c6/0x990 [ 33.083542] ================================================================== [ 33.090878] BUG: KMSAN: uninit-value in kernel_text_address+0x248/0x3a0 [ 33.097604] CPU: 1 PID: 3576 Comm: syzkaller260758 Not tainted 4.16.0+ #82 [ 33.104586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 33.113913] Call Trace: [ 33.116474] dump_stack+0x14a/0x1d0 [ 33.120088] ? kernel_text_address+0x248/0x3a0 [ 33.124649] kmsan_report+0x142/0x240 [ 33.128427] __msan_warning_32+0x6c/0xb0 [ 33.132494] kernel_text_address+0x248/0x3a0 [ 33.136879] __kernel_text_address+0x34/0xe0 [ 33.141271] show_trace_log_lvl+0x954/0x1030 [ 33.145655] ? __generic_file_write_iter+0x43b/0x990 [ 33.150741] show_stack+0xfc/0x150 [ 33.154256] ? print_worker_info+0x1b0/0x660 [ 33.158642] dump_stack+0x185/0x1d0 [ 33.162244] ? do_journal_get_write_access+0x330/0x330 [ 33.167497] __msan_memcpy+0x90/0x1f0 [ 33.171275] iov_iter_copy_from_user_atomic+0xb04/0x17d0 [ 33.176711] generic_perform_write+0x4c6/0x990 [ 33.181281] __generic_file_write_iter+0x43b/0x990 [ 33.186190] ext4_file_write_iter+0x10a0/0x1a10 [ 33.190836] ? kmsan_set_origin_inline+0x6b/0x120 [ 33.195658] ? ext4_file_read_iter+0x220/0x220 [ 33.200224] do_iter_readv_writev+0x7bb/0x970 [ 33.204705] ? ext4_file_read_iter+0x220/0x220 [ 33.209262] do_iter_write+0x30d/0xd40 [ 33.213125] ? kmsan_set_origin_inline+0x6b/0x120 [ 33.217943] ? ext4_file_read_iter+0x220/0x220 [ 33.222500] vfs_iter_write+0x118/0x180 [ 33.226452] iter_file_splice_write+0xbc3/0x1710 [ 33.231190] ? splice_from_pipe+0x2c0/0x2c0 [ 33.235487] ? splice_from_pipe+0x2c0/0x2c0 [ 33.239787] direct_splice_actor+0x19b/0x200 [ 33.244174] splice_direct_to_actor+0x764/0x1040 [ 33.248929] ? do_splice_direct+0x540/0x540 [ 33.253229] ? security_file_permission+0x28f/0x4b0 [ 33.258225] ? rw_verify_area+0x35e/0x580 [ 33.262352] do_splice_direct+0x335/0x540 [ 33.266491] do_sendfile+0x1067/0x1e40 [ 33.270364] SYSC_sendfile64+0x1b3/0x300 [ 33.274406] SyS_sendfile64+0x64/0x90 [ 33.278181] do_syscall_64+0x309/0x430 [ 33.282055] ? SYSC_sendfile+0x320/0x320 [ 33.286097] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 33.291262] RIP: 0033:0x445589 [ 33.294424] RSP: 002b:00007f0c3218cda8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 33.302105] RAX: ffffffffffffffda RBX: 00000000006dac54 RCX: 0000000000445589 [ 33.309350] RDX: 0000000020000040 RSI: 0000000000000006 RDI: 0000000000000006 [ 33.316599] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 33.323845] R10: 7527fb3200000000 R11: 0000000000000246 R12: 00000000006dac50 [ 33.331090] R13: 0030656c69662f2e R14: 7527fb3200000000 R15: 0000000000000005 [ 33.338346] [ 33.339947] Local variable description: ----newattrs.i@file_remove_privs [ 33.346753] Variable was created at: [ 33.350446] file_remove_privs+0x46/0x830 [ 33.354569] __generic_file_write_iter+0x1d7/0x990 [ 33.359477] ================================================================== [ 33.366812] Disabling lock debugging due to kernel taint [ 33.372234] Kernel panic - not syncing: panic_on_warn set ... [ 33.372234] [ 33.379589] CPU: 1 PID: 3576 Comm: syzkaller260758 Tainted: G B 4.16.0+ #82 [ 33.387888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 33.397246] Call Trace: [ 33.399816] dump_stack+0x14a/0x1d0 [ 33.403419] panic+0x39d/0x940 [ 33.406608] ? kernel_text_address+0x248/0x3a0 [ 33.411180] kmsan_report+0x238/0x240 [ 33.414961] __msan_warning_32+0x6c/0xb0 [ 33.419004] kernel_text_address+0x248/0x3a0 [ 33.423397] __kernel_text_address+0x34/0xe0 [ 33.427795] show_trace_log_lvl+0x954/0x1030 [ 33.432180] ? __generic_file_write_iter+0x43b/0x990 [ 33.437265] show_stack+0xfc/0x150 [ 33.440781] ? print_worker_info+0x1b0/0x660 [ 33.445169] dump_stack+0x185/0x1d0 [ 33.448777] ? do_journal_get_write_access+0x330/0x330 [ 33.454040] __msan_memcpy+0x90/0x1f0 [ 33.457824] iov_iter_copy_from_user_atomic+0xb04/0x17d0 [ 33.463253] generic_perform_write+0x4c6/0x990 [ 33.467814] __generic_file_write_iter+0x43b/0x990 [ 33.472729] ext4_file_write_iter+0x10a0/0x1a10 [ 33.477384] ? kmsan_set_origin_inline+0x6b/0x120 [ 33.482205] ? ext4_file_read_iter+0x220/0x220 [ 33.486765] do_iter_readv_writev+0x7bb/0x970 [ 33.491238] ? ext4_file_read_iter+0x220/0x220 [ 33.495813] do_iter_write+0x30d/0xd40 [ 33.499677] ? kmsan_set_origin_inline+0x6b/0x120 [ 33.504584] ? ext4_file_read_iter+0x220/0x220 [ 33.509144] vfs_iter_write+0x118/0x180 [ 33.513095] iter_file_splice_write+0xbc3/0x1710 [ 33.517846] ? splice_from_pipe+0x2c0/0x2c0 [ 33.522143] ? splice_from_pipe+0x2c0/0x2c0 [ 33.526442] direct_splice_actor+0x19b/0x200 [ 33.530832] splice_direct_to_actor+0x764/0x1040 [ 33.535563] ? do_splice_direct+0x540/0x540 [ 33.539860] ? security_file_permission+0x28f/0x4b0 [ 33.544853] ? rw_verify_area+0x35e/0x580 [ 33.548980] do_splice_direct+0x335/0x540 [ 33.553105] do_sendfile+0x1067/0x1e40 [ 33.556974] SYSC_sendfile64+0x1b3/0x300 [ 33.561020] SyS_sendfile64+0x64/0x90 [ 33.564805] do_syscall_64+0x309/0x430 [ 33.568672] ? SYSC_sendfile+0x320/0x320 [ 33.572711] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 33.577878] RIP: 0033:0x445589 [ 33.581045] RSP: 002b:00007f0c3218cda8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 33.588738] RAX: ffffffffffffffda RBX: 00000000006dac54 RCX: 0000000000445589 [ 33.595981] RDX: 0000000020000040 RSI: 0000000000000006 RDI: 0000000000000006 [ 33.603242] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 33.610485] R10: 7527fb3200000000 R11: 0000000000000246 R12: 00000000006dac50 [ 33.617732] R13: 0030656c69662f2e R14: 7527fb3200000000 R15: 0000000000000005 [ 33.625474] Dumping ftrace buffer: [ 33.628987] (ftrace buffer empty) [ 33.632670] Kernel Offset: disabled [ 33.636275] Rebooting in 86400 seconds..