INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.41' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 30.598641] FAULT_INJECTION: forcing a failure. [ 30.598641] name failslab, interval 1, probability 0, space 0, times 1 [ 30.609975] CPU: 1 PID: 3583 Comm: syzkaller769794 Not tainted 4.16.0+ #84 [ 30.617008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.626375] Call Trace: [ 30.628976] dump_stack+0x185/0x1d0 [ 30.632619] should_fail+0x87b/0xab0 [ 30.636334] ================================================================== [ 30.643684] BUG: KMSAN: uninit-value in kernel_text_address+0x248/0x3a0 [ 30.650422] CPU: 1 PID: 3583 Comm: syzkaller769794 Not tainted 4.16.0+ #84 [ 30.657414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.666750] Call Trace: [ 30.669329] dump_stack+0x14a/0x1d0 [ 30.672938] ? kernel_text_address+0x248/0x3a0 [ 30.677500] kmsan_report+0x142/0x240 [ 30.681279] __msan_warning_32+0x6c/0xb0 [ 30.685322] kernel_text_address+0x248/0x3a0 [ 30.689713] __kernel_text_address+0x34/0xe0 [ 30.694102] show_trace_log_lvl+0x954/0x1030 [ 30.698502] ? should_failslab+0x279/0x2a0 [ 30.702720] show_stack+0xfc/0x150 [ 30.706239] ? print_worker_info+0x1b0/0x660 [ 30.710627] dump_stack+0x185/0x1d0 [ 30.714236] should_fail+0x87b/0xab0 [ 30.717938] should_failslab+0x279/0x2a0 [ 30.721980] __kmalloc+0xc2/0x350 [ 30.725413] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 30.730854] ? load_msg+0xea/0xb20 [ 30.734372] load_msg+0xea/0xb20 [ 30.737718] ? kmsan_set_origin_inline+0x6b/0x120 [ 30.742806] ? __msan_poison_alloca+0x15c/0x1d0 [ 30.747453] ? SYSC_msgsnd+0x163/0x1b0 [ 30.751321] ? do_msgsnd+0xe5/0x1dd0 [ 30.755019] do_msgsnd+0x2c1/0x1dd0 [ 30.758636] ? kmsan_set_origin_inline+0x6b/0x120 [ 30.763458] ? kmsan_set_origin+0x9e/0x160 [ 30.767678] SYSC_msgsnd+0x163/0x1b0 [ 30.771372] SyS_msgsnd+0x64/0x90 [ 30.774808] do_syscall_64+0x309/0x430 [ 30.778685] ? compat_SyS_msgctl+0xe10/0xe10 [ 30.783076] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 30.788242] RIP: 0033:0x445879 [ 30.791408] RSP: 002b:00007f8af895cd78 EFLAGS: 00000246 ORIG_RAX: 0000000000000045 [ 30.799091] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000445879 [ 30.806339] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000000 [ 30.813587] RBP: 00000000006dac24 R08: 0000000000000001 R09: 0000000000000031 [ 30.820842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 30.828102] R13: 00007f8af895cd80 R14: 00000000006dac20 R15: 0000000000000003 [ 30.835452] [ 30.837067] Local variable description: ----fl.i@locks_remove_file [ 30.843366] Variable was created at: [ 30.847061] locks_remove_file+0x65/0x1d70 [ 30.851271] __fput+0x3c4/0xa10 [ 30.854521] ================================================================== [ 30.861863] Disabling lock debugging due to kernel taint [ 30.867296] Kernel panic - not syncing: panic_on_warn set ... [ 30.867296] [ 30.874652] CPU: 1 PID: 3583 Comm: syzkaller769794 Tainted: G B 4.16.0+ #84 [ 30.882947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.892276] Call Trace: [ 30.894851] dump_stack+0x14a/0x1d0 [ 30.898466] panic+0x39d/0x940 [ 30.901650] ? kernel_text_address+0x248/0x3a0 [ 30.906209] kmsan_report+0x238/0x240 [ 30.909989] __msan_warning_32+0x6c/0xb0 [ 30.914043] kernel_text_address+0x248/0x3a0 [ 30.918441] __kernel_text_address+0x34/0xe0 [ 30.922832] show_trace_log_lvl+0x954/0x1030 [ 30.927220] ? should_failslab+0x279/0x2a0 [ 30.931436] show_stack+0xfc/0x150 [ 30.934957] ? print_worker_info+0x1b0/0x660 [ 30.939344] dump_stack+0x185/0x1d0 [ 30.942952] should_fail+0x87b/0xab0 [ 30.946660] should_failslab+0x279/0x2a0 [ 30.950700] __kmalloc+0xc2/0x350 [ 30.954131] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 30.959565] ? load_msg+0xea/0xb20 [ 30.963083] load_msg+0xea/0xb20 [ 30.966436] ? kmsan_set_origin_inline+0x6b/0x120 [ 30.971257] ? __msan_poison_alloca+0x15c/0x1d0 [ 30.975904] ? SYSC_msgsnd+0x163/0x1b0 [ 30.979770] ? do_msgsnd+0xe5/0x1dd0 [ 30.983464] do_msgsnd+0x2c1/0x1dd0 [ 30.987071] ? kmsan_set_origin_inline+0x6b/0x120 [ 30.991893] ? kmsan_set_origin+0x9e/0x160 [ 30.996183] SYSC_msgsnd+0x163/0x1b0 [ 30.999886] SyS_msgsnd+0x64/0x90 [ 31.003344] do_syscall_64+0x309/0x430 [ 31.007212] ? compat_SyS_msgctl+0xe10/0xe10 [ 31.011601] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 31.016768] RIP: 0033:0x445879 [ 31.019933] RSP: 002b:00007f8af895cd78 EFLAGS: 00000246 ORIG_RAX: 0000000000000045 [ 31.027620] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000445879 [ 31.034869] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000000 [ 31.042126] RBP: 00000000006dac24 R08: 0000000000000001 R09: 0000000000000031 [ 31.049384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 31.056636] R13: 00007f8af895cd80 R14: 00000000006dac20 R15: 0000000000000003 [ 31.064375] Dumping ftrace buffer: [ 31.067892] (ftrace buffer empty) [ 31.071584] Kernel Offset: disabled [ 31.075194] Rebooting in 86400 seconds..