INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.62' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 52.715894] ================================================================== [ 52.723758] BUG: KMSAN: uninit-value in pointer+0x11e5/0x1410 [ 52.730228] CPU: 0 PID: 4500 Comm: syz-executor814 Not tainted 4.16.0+ #87 [ 52.737412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.748202] Call Trace: [ 52.751178] dump_stack+0x185/0x1d0 [ 52.754818] ? pointer+0x11e5/0x1410 [ 52.758799] kmsan_report+0x142/0x240 [ 52.762614] __msan_warning_32+0x6c/0xb0 [ 52.767712] ? proc_pid_stack+0x251/0x470 [ 52.771872] pointer+0x11e5/0x1410 [ 52.775442] ? proc_pid_stack+0x26a/0x470 [ 52.780181] vsnprintf+0xa2d/0x33c0 [ 52.784436] seq_printf+0x29f/0x420 [ 52.788098] ? proc_pid_stack+0x26a/0x470 [ 52.792653] ? proc_pid_stack+0x26a/0x470 [ 52.797409] ? proc_pid_stack+0x26a/0x470 [ 52.802087] proc_pid_stack+0x326/0x470 [ 52.806099] proc_single_show+0x1af/0x300 [ 52.810568] ? proc_pid_wchan+0x250/0x250 [ 52.814868] ? proc_single_open+0x90/0x90 [ 52.819280] traverse+0x3c4/0xe60 [ 52.822767] ? __msan_poison_alloca+0x15c/0x1d0 [ 52.827474] seq_read+0x3dc/0x2260 [ 52.831038] ? security_file_permission+0x473/0x4b0 [ 52.836089] do_iter_read+0x880/0xd70 [ 52.840158] ? seq_open+0x360/0x360 [ 52.843821] vfs_readv+0x1ec/0x260 [ 52.847406] default_file_splice_read+0xa9a/0x1120 [ 52.852383] ? SYSC_tee+0x13d0/0x13d0 [ 52.856207] splice_direct_to_actor+0x4c6/0x1040 [ 52.861250] ? do_splice_direct+0x540/0x540 [ 52.865596] ? security_file_permission+0x28f/0x4b0 [ 52.870647] ? rw_verify_area+0x35e/0x580 [ 52.874909] do_splice_direct+0x335/0x540 [ 52.879718] do_sendfile+0x1067/0x1e40 [ 52.883805] SYSC_sendfile64+0x1b3/0x300 [ 52.888610] SyS_sendfile64+0x64/0x90 [ 52.892411] do_syscall_64+0x309/0x430 [ 52.896469] ? SYSC_sendfile+0x320/0x320 [ 52.900527] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 52.905894] RIP: 0033:0x440099 [ 52.909095] RSP: 002b:00007ffeebd4fb58 EFLAGS: 00000213 ORIG_RAX: 0000000000000028 [ 52.916901] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440099 [ 52.924263] RDX: 0000000020000040 RSI: 0000000000000003 RDI: 0000000000000003 [ 52.931772] RBP: 00000000006ca018 R08: 0000000000000010 R09: 65732f636f72702f [ 52.939376] R10: 00010000400000fc R11: 0000000000000213 R12: 0000000000401920 [ 52.946649] R13: 00000000004019b0 R14: 0000000000000000 R15: 0000000000000000 [ 52.953985] [ 52.955600] Uninit was stored to memory at: [ 52.959920] kmsan_internal_chain_origin+0x12b/0x210 [ 52.965025] __msan_chain_origin+0x69/0xc0 [ 52.969273] __save_stack_trace+0x829/0xb00 [ 52.974558] save_stack_trace_tsk+0x258/0x2f0 [ 52.979184] proc_pid_stack+0x26a/0x470 [ 52.983253] proc_single_show+0x1af/0x300 [ 52.987404] traverse+0x3c4/0xe60 [ 52.990854] seq_read+0x3dc/0x2260 [ 52.994417] do_iter_read+0x880/0xd70 [ 52.998273] vfs_readv+0x1ec/0x260 [ 53.001812] default_file_splice_read+0xa9a/0x1120 [ 53.006743] splice_direct_to_actor+0x4c6/0x1040 [ 53.011500] do_splice_direct+0x335/0x540 [ 53.015652] do_sendfile+0x1067/0x1e40 [ 53.019538] SYSC_sendfile64+0x1b3/0x300 [ 53.023615] SyS_sendfile64+0x64/0x90 [ 53.027419] do_syscall_64+0x309/0x430 [ 53.031316] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 53.036494] Uninit was stored to memory at: [ 53.040822] kmsan_internal_chain_origin+0x12b/0x210 [ 53.045929] __msan_chain_origin+0x69/0xc0 [ 53.050265] update_stack_state+0x959/0xa40 [ 53.054619] unwind_next_frame+0x618/0xe50 [ 53.058866] __save_stack_trace+0x734/0xb00 [ 53.063214] save_stack_trace_tsk+0x258/0x2f0 [ 53.067806] proc_pid_stack+0x26a/0x470 [ 53.071793] proc_single_show+0x1af/0x300 [ 53.075945] traverse+0x3c4/0xe60 [ 53.079949] seq_read+0x3dc/0x2260 [ 53.083503] do_iter_read+0x880/0xd70 [ 53.087337] vfs_readv+0x1ec/0x260 [ 53.090906] default_file_splice_read+0xa9a/0x1120 [ 53.095953] splice_direct_to_actor+0x4c6/0x1040 [ 53.100799] do_splice_direct+0x335/0x540 [ 53.104954] do_sendfile+0x1067/0x1e40 [ 53.108846] SYSC_sendfile64+0x1b3/0x300 [ 53.112910] SyS_sendfile64+0x64/0x90 [ 53.116707] do_syscall_64+0x309/0x430 [ 53.120609] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 53.125886] Local variable description: ----oc.i.i@__alloc_pages_nodemask [ 53.132812] Variable was created at: [ 53.136718] __alloc_pages_nodemask+0x10f/0x5dc0 [ 53.141488] alloc_pages_current+0x6b5/0x970 [ 53.145887] ================================================================== [ 53.153321] Disabling lock debugging due to kernel taint [ 53.158769] Kernel panic - not syncing: panic_on_warn set ... [ 53.158769] [ 53.166145] CPU: 0 PID: 4500 Comm: syz-executor814 Tainted: G B 4.16.0+ #87 [ 53.174459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.183809] Call Trace: [ 53.186680] dump_stack+0x185/0x1d0 [ 53.190313] panic+0x39d/0x940 [ 53.193542] ? pointer+0x11e5/0x1410 [ 53.197274] kmsan_report+0x238/0x240 [ 53.201108] __msan_warning_32+0x6c/0xb0 [ 53.205202] ? proc_pid_stack+0x251/0x470 [ 53.209717] pointer+0x11e5/0x1410 [ 53.213358] ? proc_pid_stack+0x26a/0x470 [ 53.217507] vsnprintf+0xa2d/0x33c0 [ 53.221955] seq_printf+0x29f/0x420 [ 53.225619] ? proc_pid_stack+0x26a/0x470 [ 53.229764] ? proc_pid_stack+0x26a/0x470 [ 53.233918] ? proc_pid_stack+0x26a/0x470 [ 53.238161] proc_pid_stack+0x326/0x470 [ 53.242288] proc_single_show+0x1af/0x300 [ 53.246455] ? proc_pid_wchan+0x250/0x250 [ 53.251062] ? proc_single_open+0x90/0x90 [ 53.255219] traverse+0x3c4/0xe60 [ 53.258692] ? __msan_poison_alloca+0x15c/0x1d0 [ 53.263360] seq_read+0x3dc/0x2260 [ 53.266919] ? security_file_permission+0x473/0x4b0 [ 53.271946] do_iter_read+0x880/0xd70 [ 53.275772] ? seq_open+0x360/0x360 [ 53.279420] vfs_readv+0x1ec/0x260 [ 53.282963] default_file_splice_read+0xa9a/0x1120 [ 53.287994] ? SYSC_tee+0x13d0/0x13d0 [ 53.291796] splice_direct_to_actor+0x4c6/0x1040 [ 53.296747] ? do_splice_direct+0x540/0x540 [ 53.301062] ? security_file_permission+0x28f/0x4b0 [ 53.306078] ? rw_verify_area+0x35e/0x580 [ 53.310238] do_splice_direct+0x335/0x540 [ 53.314406] do_sendfile+0x1067/0x1e40 [ 53.318316] SYSC_sendfile64+0x1b3/0x300 [ 53.322390] SyS_sendfile64+0x64/0x90 [ 53.326208] do_syscall_64+0x309/0x430 [ 53.330101] ? SYSC_sendfile+0x320/0x320 [ 53.334183] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 53.339416] RIP: 0033:0x440099 [ 53.342972] RSP: 002b:00007ffeebd4fb58 EFLAGS: 00000213 ORIG_RAX: 0000000000000028 [ 53.350682] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440099 [ 53.357945] RDX: 0000000020000040 RSI: 0000000000000003 RDI: 0000000000000003 [ 53.365215] RBP: 00000000006ca018 R08: 0000000000000010 R09: 65732f636f72702f [ 53.372521] R10: 00010000400000fc R11: 0000000000000213 R12: 0000000000401920 [ 53.379803] R13: 00000000004019b0 R14: 0000000000000000 R15: 0000000000000000 [ 53.387657] Dumping ftrace buffer: [ 53.391223] (ftrace buffer empty) [ 53.394934] Kernel Offset: disabled [ 53.398577] Rebooting in 86400 seconds..