INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.14' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 41.011991] Not allocated shadow for addr ffff8801995b2018 (page ffffea00099822c0) [ 41.019717] Attempted to access 120 bytes [ 41.023859] ------------[ cut here ]------------ [ 41.028584] kernel BUG at mm/kmsan/kmsan.c:1326! [ 41.033316] invalid opcode: 0000 [#1] SMP PTI [ 41.037781] Dumping ftrace buffer: [ 41.041295] (ftrace buffer empty) [ 41.044977] Modules linked in: [ 41.048149] CPU: 1 PID: 4461 Comm: syzkaller375745 Not tainted 4.16.0+ #87 [ 41.055131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 41.064468] RIP: 0010:kmsan_get_shadow_address+0x1ce/0x1f0 [ 41.070065] RSP: 0018:ffff8801b447f020 EFLAGS: 00010082 [ 41.075402] RAX: 000000000000001d RBX: 0000000000000660 RCX: 0000000000000000 [ 41.082645] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 41.089889] RBP: ffff8801b447f038 R08: 0000000000000000 R09: 0000000000000001 [ 41.097132] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801b447f150 [ 41.104378] R13: ffff88019a618000 R14: 0000000000000001 R15: 0000000000000078 [ 41.111622] FS: 0000000000a9b880(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000 [ 41.119821] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.125676] CR2: 0000000000455050 CR3: 0000000198528000 CR4: 00000000001406e0 [ 41.132920] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 41.140166] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 41.147408] Call Trace: [ 41.149979] __msan_memcpy+0xaf/0x160 [ 41.153756] depot_save_stack+0x360/0x4c0 [ 41.157883] ? __irqentry_text_end+0x1fb47e/0x1fb47e [ 41.162959] kmsan_internal_chain_origin+0x1ab/0x210 [ 41.168044] ? kmsan_internal_chain_origin+0x12b/0x210 [ 41.173641] ? kmsan_memcpy_origins+0x11d/0x170 [ 41.178282] ? kmsan_copy_to_user+0x132/0x160 [ 41.182754] ? simple_read_from_buffer+0x24d/0x3d0 [ 41.187661] ? proc_loginuid_read+0x34f/0x410 [ 41.192131] ? do_iter_read+0x880/0xd70 [ 41.196078] ? vfs_readv+0x1ec/0x260 [ 41.199767] ? default_file_splice_read+0xa9a/0x1120 [ 41.204846] ? splice_direct_to_actor+0x4c6/0x1040 [ 41.209755] ? do_splice_direct+0x335/0x540 [ 41.214054] ? do_sendfile+0x1067/0x1e40 [ 41.218091] ? SYSC_sendfile64+0x1b3/0x300 [ 41.222300] ? SyS_sendfile64+0x64/0x90 [ 41.226251] ? do_syscall_64+0x309/0x430 [ 41.230294] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 41.235637] ? scnprintf+0x222/0x2b0 [ 41.239338] kmsan_memcpy_origins+0x11d/0x170 [ 41.243809] kmsan_copy_to_user+0x132/0x160 [ 41.248107] simple_read_from_buffer+0x24d/0x3d0 [ 41.252842] proc_loginuid_read+0x34f/0x410 [ 41.257145] do_iter_read+0x880/0xd70 [ 41.260927] ? oom_score_adj_write+0x440/0x440 [ 41.265484] vfs_readv+0x1ec/0x260 [ 41.269006] default_file_splice_read+0xa9a/0x1120 [ 41.273928] ? security_file_permission+0x473/0x4b0 [ 41.278920] ? rw_verify_area+0x35e/0x580 [ 41.283048] ? SYSC_tee+0x13d0/0x13d0 [ 41.286823] splice_direct_to_actor+0x4c6/0x1040 [ 41.291567] ? do_splice_direct+0x540/0x540 [ 41.295863] ? security_file_permission+0x28f/0x4b0 [ 41.300858] ? rw_verify_area+0x35e/0x580 [ 41.304987] do_splice_direct+0x335/0x540 [ 41.309117] do_sendfile+0x1067/0x1e40 [ 41.312984] SYSC_sendfile64+0x1b3/0x300 [ 41.317033] SyS_sendfile64+0x64/0x90 [ 41.320813] do_syscall_64+0x309/0x430 [ 41.324675] ? SYSC_sendfile+0x320/0x320 [ 41.328714] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 41.333878] RIP: 0033:0x440249 [ 41.337044] RSP: 002b:00007fff7cd18408 EFLAGS: 00000217 ORIG_RAX: 0000000000000028 [ 41.344738] RAX: ffffffffffffffda RBX: 00007fff7cd18410 RCX: 0000000000440249 [ 41.352105] RDX: 0000000020000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 41.359350] RBP: 0000000000000000 R08: 0000000000000013 R09: 65732f636f72702f [ 41.366600] R10: 0000000000000009 R11: 0000000000000217 R12: 6469756e69676f6c [ 41.373844] R13: 726f63735f6d6f6f R14: 0000000000000000 R15: 0000000000000000 [ 41.381096] Code: 75 29 48 c7 c7 fd 92 7d 8a 31 c0 e8 4d 68 86 ff 80 3c 25 e8 03 2c 8b 00 75 11 48 c7 c7 2d 93 7d 8a 31 c0 4c 89 fe e8 32 68 86 ff <0f> 0b eb fe 48 3d ff ff ff 1f 0f 87 a2 fe ff ff 48 8b 1c 25 10 [ 41.400174] RIP: kmsan_get_shadow_address+0x1ce/0x1f0 RSP: ffff8801b447f020 [ 41.407249] ---[ end trace e23ac63daf5ddccb ]--- [ 41.411975] Kernel panic - not syncing: Fatal exception [ 42.539031] Shutting down cpus with NMI [ 42.554713] Dumping ftrace buffer: [ 42.558231] (ftrace buffer empty) [ 42.561918] Kernel Offset: disabled [ 42.565524] Rebooting in 86400 seconds..