INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.36' (ECDSA) to the list of known hosts. 2018/04/30 06:30:28 parsed 1 programs 2018/04/30 06:30:28 executed programs: 0 syzkaller login: [ 42.348770] IPVS: ftp: loaded support on port[0] = 21 [ 42.405631] IPVS: ftp: loaded support on port[0] = 21 [ 42.476570] IPVS: ftp: loaded support on port[0] = 21 [ 42.578100] IPVS: ftp: loaded support on port[0] = 21 [ 42.688874] IPVS: ftp: loaded support on port[0] = 21 [ 42.755944] IPVS: ftp: loaded support on port[0] = 21 [ 42.818920] IPVS: ftp: loaded support on port[0] = 21 [ 42.909780] IPVS: ftp: loaded support on port[0] = 21 2018/04/30 06:30:33 executed programs: 280 [ 50.513376] ================================================================== [ 50.520796] BUG: KMSAN: uninit-value in __list_del_entry_valid+0x23a/0x440 [ 50.527797] CPU: 1 PID: 4516 Comm: syz-executor3 Not tainted 4.16.0+ #87 [ 50.534616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.543950] Call Trace: [ 50.546533] dump_stack+0x185/0x1d0 [ 50.550147] ? __list_del_entry_valid+0x23a/0x440 [ 50.554977] kmsan_report+0x142/0x240 [ 50.558762] __msan_warning_32+0x6c/0xb0 [ 50.562807] __list_del_entry_valid+0x23a/0x440 [ 50.567462] dequeue_task_fair+0xac0/0x2ea0 [ 50.571775] ? enqueue_task_fair+0x43a0/0x43a0 [ 50.576339] deactivate_task+0x50d/0x780 [ 50.580388] __schedule+0x164/0x730 [ 50.583999] ? schedule+0x1cc/0x2f0 [ 50.587611] schedule+0x1cc/0x2f0 [ 50.591047] do_nanosleep+0x2c3/0x9b0 [ 50.594835] SYSC_nanosleep+0x420/0x6a0 [ 50.598794] ? hrtimer_init_sleeper+0xc0/0xc0 [ 50.603289] SyS_nanosleep+0x46/0x70 [ 50.606987] do_syscall_64+0x309/0x430 [ 50.610861] ? hrtimer_nanosleep+0x560/0x560 [ 50.615254] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 50.620426] RIP: 0033:0x481080 [ 50.623599] RSP: 002b:00007ffed6b67b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000023 [ 50.631289] RAX: ffffffffffffffda RBX: 000000000000003c RCX: 0000000000481080 [ 50.638544] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffed6b67b30 [ 50.645808] RBP: 000000000000c551 R08: 0000000000000001 R09: 00000000024dd940 [ 50.653068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.660320] R13: 0000000000000004 R14: 000000000000007a R15: 000000000000c50d [ 50.667575] [ 50.669181] Uninit was stored to memory at: [ 50.673488] kmsan_internal_chain_origin+0x12b/0x210 [ 50.678574] __msan_chain_origin+0x69/0xc0 [ 50.682789] pick_next_task_fair+0x1eb2/0x1f70 [ 50.687357] pick_next_task+0x1b4/0x410 [ 50.691313] __schedule+0x211/0x730 [ 50.694924] _cond_resched+0x5e/0xd0 [ 50.698629] unmap_page_range+0x35e0/0x3be0 [ 50.702931] unmap_single_vma+0x45b/0x5f0 [ 50.707058] unmap_vmas+0x1f4/0x360 [ 50.710665] exit_mmap+0x3da/0x950 [ 50.714188] __mmput+0x16c/0x610 [ 50.717535] mmput+0xab/0xf0 [ 50.720537] exit_mm+0x6ed/0x7a0 [ 50.723884] do_exit+0xc01/0x38d0 [ 50.727320] do_group_exit+0x1a0/0x360 [ 50.731191] SYSC_exit_group+0x21/0x30 [ 50.735074] SyS_exit_group+0x25/0x30 [ 50.738855] do_syscall_64+0x309/0x430 [ 50.742724] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 50.747893] Local variable description: ----flags.i.i.i.i.i.i.i@kmem_cache_free [ 50.755314] Variable was created at: [ 50.759012] kmem_cache_free+0xec/0x2bc0 [ 50.763064] exit_fs+0x2b1/0x2c0 [ 50.766407] ================================================================== [ 50.773744] Disabling lock debugging due to kernel taint [ 50.779173] Kernel panic - not syncing: panic_on_warn set ... [ 50.779173] [ 50.786522] CPU: 1 PID: 4516 Comm: syz-executor3 Tainted: G B 4.16.0+ #87 [ 50.794641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.803976] Call Trace: [ 50.806547] dump_stack+0x185/0x1d0 [ 50.810160] panic+0x39d/0x940 [ 50.813355] ? __list_del_entry_valid+0x23a/0x440 [ 50.818184] kmsan_report+0x238/0x240 [ 50.821972] __msan_warning_32+0x6c/0xb0 [ 50.826019] __list_del_entry_valid+0x23a/0x440 [ 50.830674] dequeue_task_fair+0xac0/0x2ea0 [ 50.834987] ? enqueue_task_fair+0x43a0/0x43a0 [ 50.839553] deactivate_task+0x50d/0x780 [ 50.843603] __schedule+0x164/0x730 [ 50.847213] ? schedule+0x1cc/0x2f0 [ 50.850829] schedule+0x1cc/0x2f0 [ 50.854263] do_nanosleep+0x2c3/0x9b0 [ 50.858053] SYSC_nanosleep+0x420/0x6a0 [ 50.862010] ? hrtimer_init_sleeper+0xc0/0xc0 [ 50.866491] SyS_nanosleep+0x46/0x70 [ 50.870186] do_syscall_64+0x309/0x430 [ 50.874059] ? hrtimer_nanosleep+0x560/0x560 [ 50.878453] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 50.883622] RIP: 0033:0x481080 [ 50.886794] RSP: 002b:00007ffed6b67b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000023 [ 50.894485] RAX: ffffffffffffffda RBX: 000000000000003c RCX: 0000000000481080 [ 50.901735] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffed6b67b30 [ 50.908985] RBP: 000000000000c551 R08: 0000000000000001 R09: 00000000024dd940 [ 50.916241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.923492] R13: 0000000000000004 R14: 000000000000007a R15: 000000000000c50d [ 52.040593] Shutting down cpus with NMI [ 52.056147] Dumping ftrace buffer: [ 52.059674] (ftrace buffer empty) [ 52.063364] Kernel Offset: disabled [ 52.066979] Rebooting in 86400 seconds..