==================================================================
WARNING: memcpy-param-overlap in generic_perform_write+0x4c6/0x990 mm/filemap.c:3146
__msan_memcpy(ffff8801bcc9f000, ffff8801bcc9f00d, 4083)
CPU: 1 PID: 7137 Comm: syz-executor0 Not tainted 4.16.0+ #84
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
sctp: [Deprecated]: syz-executor6 (pid 7140) Use of int in maxseg socket option.
Use struct sctp_assoc_value instead
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:53
 __msan_memcpy+0x90/0x1f0 mm/kmsan/kmsan_instr.c:433
 memcpy_from_page lib/iov_iter.c:459 [inline]
 iov_iter_copy_from_user_atomic+0xb04/0x17d0 lib/iov_iter.c:792
 generic_perform_write+0x4c6/0x990 mm/filemap.c:3146
 __generic_file_write_iter+0x43b/0x990 mm/filemap.c:3263
==================================================================
BUG: KMSAN: uninit-value in update_stack_state+0x673/0xa40 arch/x86/kernel/unwind_frame.c:222
CPU: 1 PID: 7137 Comm: syz-executor0 Not tainted 4.16.0+ #84
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14a/0x1d0 lib/dump_stack.c:53
 kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1067
 __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:676
 update_stack_state+0x673/0xa40 arch/x86/kernel/unwind_frame.c:222
 unwind_next_frame+0x618/0xe50 arch/x86/kernel/unwind_frame.c:329
 show_trace_log_lvl+0xb49/0x1030 arch/x86/kernel/dumpstack.c:212
 show_stack+0xfc/0x150 arch/x86/kernel/dumpstack.c:236
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:53
 __msan_memcpy+0x90/0x1f0 mm/kmsan/kmsan_instr.c:433
 memcpy_from_page lib/iov_iter.c:459 [inline]
 iov_iter_copy_from_user_atomic+0xb04/0x17d0 lib/iov_iter.c:792
 generic_perform_write+0x4c6/0x990 mm/filemap.c:3146
 __generic_file_write_iter+0x43b/0x990 mm/filemap.c:3263
 generic_file_write_iter+0x814/0xbf0 mm/filemap.c:3291
sctp: [Deprecated]: syz-executor6 (pid 7144) Use of int in maxseg socket option.
Use struct sctp_assoc_value instead
 do_iter_readv_writev+0x7bb/0x970 include/linux/fs.h:1776
 do_iter_write+0x30d/0xd40 fs/read_write.c:932
 vfs_iter_write+0x118/0x180 fs/read_write.c:945
 iter_file_splice_write+0xbc3/0x1710 fs/splice.c:749
 do_splice_from fs/splice.c:851 [inline]
 direct_splice_actor+0x19b/0x200 fs/splice.c:1018
 splice_direct_to_actor+0x764/0x1040 fs/splice.c:973
 do_splice_direct+0x335/0x540 fs/splice.c:1061
 do_sendfile+0x1067/0x1e40 fs/read_write.c:1413
 SYSC_sendfile64+0x1b3/0x300 fs/read_write.c:1468
 SyS_sendfile64+0x64/0x90 fs/read_write.c:1460
 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x3d/0xa2
RIP: 0033:0x455319
RSP: 002b:00007ff0342f7c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
RAX: ffffffffffffffda RBX: 00007ff0342f86d4 RCX: 0000000000455319
RDX: 0000000020335ff8 RSI: 0000000000000013 RDI: 0000000000000013
RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
R10: 00000000ffffffff R11: 0000000000000246 R12: 00000000ffffffff
R13: 00000000000004c6 R14: 00000000006fa330 R15: 0000000000000000

Local variable description: ----pvma.i@shmem_alloc_and_acct_page
Variable was created at:
 shmem_alloc_and_acct_page+0xa8/0x1000 mm/shmem.c:1480
 shmem_getpage_gfp+0x35db/0x5770 mm/shmem.c:1771
==================================================================