INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.11' (ECDSA) to the list of known hosts. 2018/04/13 10:36:39 parsed 1 programs 2018/04/13 10:36:39 executed programs: 0 2018/04/13 10:36:44 executed programs: 319 2018/04/13 10:36:49 executed programs: 641 2018/04/13 10:36:54 executed programs: 958 2018/04/13 10:36:59 executed programs: 1266 2018/04/13 10:37:04 executed programs: 1589 2018/04/13 10:37:09 executed programs: 1912 2018/04/13 10:37:14 executed programs: 2229 2018/04/13 10:37:19 executed programs: 2544 2018/04/13 10:37:24 executed programs: 2869 2018/04/13 10:37:29 executed programs: 3190 2018/04/13 10:37:34 executed programs: 3516 syzkaller login: [ 126.915460] ================================================================== [ 126.922881] BUG: KMSAN: uninit-value in __list_del_entry_valid+0x38a/0x440 [ 126.929895] CPU: 0 PID: 8 Comm: rcu_sched Not tainted 4.16.0+ #83 [ 126.936118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 126.945455] Call Trace: [ 126.948030] dump_stack+0x185/0x1d0 [ 126.951641] ? __list_del_entry_valid+0x38a/0x440 [ 126.956468] kmsan_report+0x142/0x240 [ 126.960256] __msan_warning_32+0x6c/0xb0 [ 126.964302] __list_del_entry_valid+0x38a/0x440 [ 126.968957] dequeue_task_fair+0xac0/0x2ea0 [ 126.973269] ? enqueue_task_fair+0x43a0/0x43a0 [ 126.977833] deactivate_task+0x50d/0x780 [ 126.981881] __schedule+0x164/0x730 [ 126.985490] ? schedule+0x1cc/0x2f0 [ 126.989101] schedule+0x1cc/0x2f0 [ 126.992541] schedule_timeout+0x3e7/0x570 [ 126.996672] ? run_local_timers+0x100/0x100 [ 127.000980] rcu_gp_kthread+0x21e1/0x38d0 [ 127.005124] ? rcu_barrier_func+0x120/0x120 [ 127.009432] kthread+0x539/0x720 [ 127.012787] ? rcu_barrier_func+0x120/0x120 [ 127.017098] ? kthread_blkcg+0xf0/0xf0 [ 127.020972] ret_from_fork+0x35/0x40 [ 127.024667] [ 127.026272] Uninit was stored to memory at: [ 127.030580] kmsan_internal_chain_origin+0x12b/0x210 [ 127.035666] __msan_chain_origin+0x69/0xc0 [ 127.039884] pick_next_task_fair+0x1e89/0x1f70 [ 127.044453] pick_next_task+0x1b4/0x410 [ 127.048409] __schedule+0x211/0x730 [ 127.052034] _cond_resched+0x5e/0xd0 [ 127.055730] unmap_page_range+0x35e0/0x3be0 [ 127.060034] unmap_single_vma+0x45b/0x5f0 [ 127.064168] unmap_vmas+0x1f4/0x360 [ 127.067781] exit_mmap+0x3da/0x950 [ 127.071306] __mmput+0x16c/0x610 [ 127.074651] mmput+0xab/0xf0 [ 127.077651] exit_mm+0x6ed/0x7a0 [ 127.080999] do_exit+0xc01/0x38d0 [ 127.084434] do_group_exit+0x1a0/0x360 [ 127.088303] get_signal+0x1320/0x1f20 [ 127.092086] do_signal+0xb8/0x1c80 [ 127.095610] prepare_exit_to_usermode+0x271/0x3a0 [ 127.100434] syscall_return_slowpath+0xe9/0x700 [ 127.105092] do_syscall_64+0x36d/0x430 [ 127.108962] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 127.114128] Uninit was stored to memory at: [ 127.118431] kmsan_internal_chain_origin+0x12b/0x210 [ 127.123518] __msan_chain_origin+0x69/0xc0 [ 127.127733] pick_next_task_fair+0x1e2c/0x1f70 [ 127.132299] pick_next_task+0x1b4/0x410 [ 127.136255] __schedule+0x211/0x730 [ 127.139861] _cond_resched+0x5e/0xd0 [ 127.143556] unmap_page_range+0x35e0/0x3be0 [ 127.147860] unmap_single_vma+0x45b/0x5f0 [ 127.151989] unmap_vmas+0x1f4/0x360 [ 127.155597] exit_mmap+0x3da/0x950 [ 127.159117] __mmput+0x16c/0x610 [ 127.162462] mmput+0xab/0xf0 [ 127.165462] exit_mm+0x6ed/0x7a0 [ 127.168809] do_exit+0xc01/0x38d0 [ 127.172243] do_group_exit+0x1a0/0x360 [ 127.176113] get_signal+0x1320/0x1f20 [ 127.179899] do_signal+0xb8/0x1c80 [ 127.183420] prepare_exit_to_usermode+0x271/0x3a0 [ 127.188254] syscall_return_slowpath+0xe9/0x700 [ 127.192905] do_syscall_64+0x36d/0x430 [ 127.196778] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 127.201943] Uninit was stored to memory at: [ 127.206244] kmsan_internal_chain_origin+0x12b/0x210 [ 127.211333] __msan_chain_origin+0x69/0xc0 [ 127.215550] enqueue_task_fair+0x2900/0x43a0 [ 127.219943] try_to_wake_up+0x13cc/0x20a0 [ 127.224074] wake_up_process+0x34/0x40 [ 127.227945] swake_up+0xfb/0x3b0 [ 127.231296] rcu_report_qs_rnp+0x767/0x880 [ 127.235516] rcu_process_callbacks+0x7b0/0x2070 [ 127.240169] __do_softirq+0x56d/0x93d [ 127.243949] Uninit was stored to memory at: [ 127.248252] kmsan_internal_chain_origin+0x12b/0x210 [ 127.253336] __msan_chain_origin+0x69/0xc0 [ 127.257549] enqueue_task_fair+0x2962/0x43a0 [ 127.261940] try_to_wake_up+0x13cc/0x20a0 [ 127.266071] wake_up_process+0x34/0x40 [ 127.269939] hrtimer_wakeup+0xac/0x100 [ 127.273808] __hrtimer_run_queues+0xc03/0x15d0 [ 127.278370] hrtimer_interrupt+0x426/0xaf0 [ 127.282590] local_apic_timer_interrupt+0x66/0x230 [ 127.287506] smp_apic_timer_interrupt+0x5a/0x90 [ 127.292150] Local variable description: ----t.i@SYSC_nanosleep [ 127.298096] Variable was created at: [ 127.301793] SYSC_nanosleep+0x5f/0x6a0 [ 127.305659] SyS_nanosleep+0x46/0x70 [ 127.309347] ================================================================== [ 127.316681] Disabling lock debugging due to kernel taint [ 127.322111] Kernel panic - not syncing: panic_on_warn set ... [ 127.322111] [ 127.329459] CPU: 0 PID: 8 Comm: rcu_sched Tainted: G B 4.16.0+ #83 [ 127.336974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 127.346307] Call Trace: [ 127.348901] dump_stack+0x185/0x1d0 [ 127.352513] panic+0x39d/0x940 [ 127.355704] ? __list_del_entry_valid+0x38a/0x440 [ 127.360530] kmsan_report+0x238/0x240 [ 127.364315] __msan_warning_32+0x6c/0xb0 [ 127.368361] __list_del_entry_valid+0x38a/0x440 [ 127.373013] dequeue_task_fair+0xac0/0x2ea0 [ 127.377323] ? enqueue_task_fair+0x43a0/0x43a0 [ 127.381888] deactivate_task+0x50d/0x780 [ 127.385939] __schedule+0x164/0x730 [ 127.389548] ? schedule+0x1cc/0x2f0 [ 127.393161] schedule+0x1cc/0x2f0 [ 127.396601] schedule_timeout+0x3e7/0x570 [ 127.400735] ? run_local_timers+0x100/0x100 [ 127.405054] rcu_gp_kthread+0x21e1/0x38d0 [ 127.409202] ? rcu_barrier_func+0x120/0x120 [ 127.413507] kthread+0x539/0x720 [ 127.416858] ? rcu_barrier_func+0x120/0x120 [ 127.421164] ? kthread_blkcg+0xf0/0xf0 [ 127.425038] ret_from_fork+0x35/0x40 [ 128.539933] Shutting down cpus with NMI [ 128.555500] Dumping ftrace buffer: [ 128.559028] (ftrace buffer empty) [ 128.562721] Kernel Offset: disabled [ 128.566332] Rebooting in 86400 seconds..