INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.12' (ECDSA) to the list of known hosts. 2018/04/28 20:05:54 parsed 1 programs 2018/04/28 20:05:54 executed programs: 0 syzkaller login: [ 708.707792] IPVS: ftp: loaded support on port[0] = 21 [ 708.759638] IPVS: ftp: loaded support on port[0] = 21 [ 708.788887] IPVS: ftp: loaded support on port[0] = 21 [ 708.871210] IPVS: ftp: loaded support on port[0] = 21 [ 708.954388] IPVS: ftp: loaded support on port[0] = 21 [ 709.066038] IPVS: ftp: loaded support on port[0] = 21 [ 709.112925] IPVS: ftp: loaded support on port[0] = 21 [ 709.156003] IPVS: ftp: loaded support on port[0] = 21 2018/04/28 20:05:59 executed programs: 316 2018/04/28 20:06:04 executed programs: 617 2018/04/28 20:06:09 executed programs: 902 [ 724.018381] ================================================================== [ 724.025933] BUG: KMSAN: uninit-value in get_page_from_freelist+0x5e50/0xb600 [ 724.033211] CPU: 0 PID: 7004 Comm: syz-executor3 Not tainted 4.16.0+ #87 [ 724.040077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 724.049469] Call Trace: [ 724.052154] dump_stack+0x185/0x1d0 [ 724.055826] ? get_page_from_freelist+0x5e50/0xb600 [ 724.060884] kmsan_report+0x142/0x240 [ 724.064715] __msan_warning_32+0x6c/0xb0 [ 724.068804] get_page_from_freelist+0x5e50/0xb600 [ 724.073700] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 724.079103] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 724.084580] ? __msan_poison_alloca+0x15c/0x1d0 [ 724.089389] ? __switch_to+0x2b3/0x420 [ 724.093313] ? kmsan_set_origin_inline+0x6b/0x120 [ 724.098223] ? __msan_poison_alloca+0x15c/0x1d0 [ 724.102923] ? __next_zones_zonelist+0x15f/0x290 [ 724.107723] __alloc_pages_nodemask+0x789/0x5dc0 [ 724.112506] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 724.117897] ? page_counter_try_charge+0x4af/0x5c0 [ 724.122850] ? mem_cgroup_try_charge+0xa80/0xf00 [ 724.127633] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 724.133043] ? try_charge+0x26ce/0x2fd0 [ 724.137052] ? save_stack_trace+0xa5/0xf0 [ 724.141237] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 724.146729] ? kmsan_set_origin_inline+0x6b/0x120 [ 724.151614] alloc_pages_current+0x6b5/0x970 [ 724.156058] pte_alloc_one+0x56/0x110 [ 724.159890] do_huge_pmd_anonymous_page+0x12ae/0x2520 [ 724.165115] handle_mm_fault+0x428f/0x7e50 [ 724.169402] ? kmsan_set_origin_inline+0x6b/0x120 [ 724.174284] __do_page_fault+0xec4/0x1a10 [ 724.178571] ? page_fault+0x25/0x50 [ 724.182226] do_page_fault+0xd3/0x260 [ 724.186051] page_fault+0x25/0x50 [ 724.189528] RIP: 0010:copy_user_generic_unrolled+0xa0/0xc0 [ 724.195159] RSP: 0018:ffff8801afb1fae0 EFLAGS: 00010202 [ 724.200539] RAX: ffffffff83eaed02 RBX: 0000000020999000 RCX: 0000000000000002 [ 724.207818] RDX: 0000000000000002 RSI: ffff8801993d6e00 RDI: 0000000020999000 [ 724.215109] RBP: ffff8801afb1fb48 R08: 00000000010000c0 R09: 0000000000000001 [ 724.222393] R10: 0000000000000000 R11: ffff8801afb10000 R12: 0000000000000000 [ 724.229681] R13: ffff8801afb1fae8 R14: 0000000000000000 R15: ffff8801a5d3c418 [ 724.237049] ? _copy_to_user+0x92/0x180 [ 724.241059] ? _copy_to_user+0xed/0x180 [ 724.245137] ccid_getsockopt_builtin_ccids+0x25b/0x400 [ 724.250549] do_dccp_getsockopt+0x49c/0x13e0 [ 724.254989] dccp_getsockopt+0xfd/0x200 [ 724.258996] ? compat_dccp_setsockopt+0x180/0x180 [ 724.263904] sock_common_getsockopt+0x13a/0x170 [ 724.268602] ? sock_recv_errqueue+0x990/0x990 [ 724.273203] SYSC_getsockopt+0x49b/0x570 [ 724.277306] SyS_getsockopt+0x76/0xa0 [ 724.281131] do_syscall_64+0x309/0x430 [ 724.285053] ? SYSC_setsockopt+0x570/0x570 [ 724.289314] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 724.294522] RIP: 0033:0x455979 [ 724.297721] RSP: 002b:00007f086b4e3c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 724.305441] RAX: ffffffffffffffda RBX: 00007f086b4e46d4 RCX: 0000000000455979 [ 724.312756] RDX: 000000000000000c RSI: 002000000000010d RDI: 0000000000000003 [ 724.320068] RBP: 000000000072bea0 R08: 0000000020000000 R09: 0000000000000000 [ 724.327381] R10: 0000000020999000 R11: 0000000000000246 R12: 00000000ffffffff [ 724.334671] R13: 00000000000000cd R14: 00000000006f43d8 R15: 0000000000000000 [ 724.341992] [ 724.343629] Uninit was stored to memory at: [ 724.348046] kmsan_internal_chain_origin+0x12b/0x210 [ 724.353219] __msan_chain_origin+0x69/0xc0 [ 724.357491] free_unref_page_commit+0x4fb/0x530 [ 724.362191] free_pages+0x290/0x320 [ 724.365841] tlb_finish_mmu+0x3f7/0x5c0 [ 724.369873] exit_mmap+0x498/0x950 [ 724.373443] __mmput+0x16c/0x610 [ 724.376833] mmput+0xab/0xf0 [ 724.379869] exit_mm+0x6ed/0x7a0 [ 724.383273] do_exit+0xc01/0x38d0 [ 724.386749] do_group_exit+0x1a0/0x360 [ 724.390659] SYSC_exit_group+0x21/0x30 [ 724.394567] SyS_exit_group+0x25/0x30 [ 724.398383] do_syscall_64+0x309/0x430 [ 724.402313] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 724.407517] Local variable description: ----tlb@exit_mmap [ 724.413066] Variable was created at: [ 724.416805] exit_mmap+0x48/0x950 [ 724.420280] __mmput+0x16c/0x610 [ 724.423651] ================================================================== [ 724.431011] Disabling lock debugging due to kernel taint [ 724.436468] Kernel panic - not syncing: panic_on_warn set ... [ 724.436468] [ 724.443855] CPU: 0 PID: 7004 Comm: syz-executor3 Tainted: G B 4.16.0+ #87 [ 724.452025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 724.461398] Call Trace: [ 724.464007] dump_stack+0x185/0x1d0 [ 724.467664] panic+0x39d/0x940 [ 724.470900] ? get_page_from_freelist+0x5e50/0xb600 [ 724.475933] kmsan_report+0x238/0x240 [ 724.479763] __msan_warning_32+0x6c/0xb0 [ 724.483849] get_page_from_freelist+0x5e50/0xb600 [ 724.488685] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 724.494039] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 724.499494] ? __msan_poison_alloca+0x15c/0x1d0 [ 724.504152] ? __switch_to+0x2b3/0x420 [ 724.508028] ? kmsan_set_origin_inline+0x6b/0x120 [ 724.512861] ? __msan_poison_alloca+0x15c/0x1d0 [ 724.517524] ? __next_zones_zonelist+0x15f/0x290 [ 724.522269] __alloc_pages_nodemask+0x789/0x5dc0 [ 724.527018] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 724.532384] ? page_counter_try_charge+0x4af/0x5c0 [ 724.537307] ? mem_cgroup_try_charge+0xa80/0xf00 [ 724.542063] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 724.547424] ? try_charge+0x26ce/0x2fd0 [ 724.551392] ? save_stack_trace+0xa5/0xf0 [ 724.555523] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 724.560967] ? kmsan_set_origin_inline+0x6b/0x120 [ 724.565803] alloc_pages_current+0x6b5/0x970 [ 724.570218] pte_alloc_one+0x56/0x110 [ 724.574009] do_huge_pmd_anonymous_page+0x12ae/0x2520 [ 724.579208] handle_mm_fault+0x428f/0x7e50 [ 724.583434] ? kmsan_set_origin_inline+0x6b/0x120 [ 724.588269] __do_page_fault+0xec4/0x1a10 [ 724.592409] ? page_fault+0x25/0x50 [ 724.596024] do_page_fault+0xd3/0x260 [ 724.599815] page_fault+0x25/0x50 [ 724.603266] RIP: 0010:copy_user_generic_unrolled+0xa0/0xc0 [ 724.608871] RSP: 0018:ffff8801afb1fae0 EFLAGS: 00010202 [ 724.614230] RAX: ffffffff83eaed02 RBX: 0000000020999000 RCX: 0000000000000002 [ 724.621495] RDX: 0000000000000002 RSI: ffff8801993d6e00 RDI: 0000000020999000 [ 724.628755] RBP: ffff8801afb1fb48 R08: 00000000010000c0 R09: 0000000000000001 [ 724.636009] R10: 0000000000000000 R11: ffff8801afb10000 R12: 0000000000000000 [ 724.643269] R13: ffff8801afb1fae8 R14: 0000000000000000 R15: ffff8801a5d3c418 [ 724.650541] ? _copy_to_user+0x92/0x180 [ 724.654517] ? _copy_to_user+0xed/0x180 [ 724.658486] ccid_getsockopt_builtin_ccids+0x25b/0x400 [ 724.663755] do_dccp_getsockopt+0x49c/0x13e0 [ 724.668172] dccp_getsockopt+0xfd/0x200 [ 724.672152] ? compat_dccp_setsockopt+0x180/0x180 [ 724.676999] sock_common_getsockopt+0x13a/0x170 [ 724.681664] ? sock_recv_errqueue+0x990/0x990 [ 724.686150] SYSC_getsockopt+0x49b/0x570 [ 724.690223] SyS_getsockopt+0x76/0xa0 [ 724.694029] do_syscall_64+0x309/0x430 [ 724.697922] ? SYSC_setsockopt+0x570/0x570 [ 724.702167] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 724.707348] RIP: 0033:0x455979 [ 724.710524] RSP: 002b:00007f086b4e3c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 724.718221] RAX: ffffffffffffffda RBX: 00007f086b4e46d4 RCX: 0000000000455979 [ 724.725478] RDX: 000000000000000c RSI: 002000000000010d RDI: 0000000000000003 [ 724.732736] RBP: 000000000072bea0 R08: 0000000020000000 R09: 0000000000000000 [ 724.739994] R10: 0000000020999000 R11: 0000000000000246 R12: 00000000ffffffff [ 724.747250] R13: 00000000000000cd R14: 00000000006f43d8 R15: 0000000000000000 [ 724.755145] Dumping ftrace buffer: [ 724.758684] (ftrace buffer empty) [ 724.762378] Kernel Offset: disabled [ 724.765989] Rebooting in 86400 seconds..