[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 79.285144][ T32] audit: type=1800 audit(1568230084.355:25): pid=11601 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 79.308279][ T32] audit: type=1800 audit(1568230084.375:26): pid=11601 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 79.343222][ T32] audit: type=1800 audit(1568230084.405:27): pid=11601 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.119' (ECDSA) to the list of known hosts. 2019/09/11 19:28:18 fuzzer started 2019/09/11 19:28:22 dialing manager at 10.128.0.26:43541 2019/09/11 19:28:22 syscalls: 2376 2019/09/11 19:28:22 code coverage: enabled 2019/09/11 19:28:22 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/09/11 19:28:22 extra coverage: enabled 2019/09/11 19:28:22 setuid sandbox: enabled 2019/09/11 19:28:22 namespace sandbox: enabled 2019/09/11 19:28:22 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/11 19:28:22 fault injection: enabled 2019/09/11 19:28:22 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/11 19:28:22 net packet injection: enabled 2019/09/11 19:28:22 net device setup: enabled syzkaller login: [ 157.380748][ C1] ================================================================== [ 157.388856][ C1] BUG: KMSAN: uninit-value in kmem_cache_free+0x3df/0x2b70 [ 157.396060][ C1] CPU: 1 PID: 16 Comm: ksoftirqd/1 Not tainted 5.3.0-rc7+ #0 [ 157.403871][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 157.413907][ C1] Call Trace: [ 157.417185][ C1] dump_stack+0x191/0x1f0 [ 157.421510][ C1] kmsan_report+0x162/0x2d0 [ 157.426003][ C1] __msan_warning+0x75/0xe0 [ 157.430496][ C1] kmem_cache_free+0x3df/0x2b70 [ 157.435326][ C1] ? kfree_skb+0x473/0x4c0 [ 157.439720][ C1] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 157.445788][ C1] kfree_skb+0x473/0x4c0 [ 157.450012][ C1] ? packet_rcv_spkt+0x719/0x840 [ 157.454935][ C1] packet_rcv_spkt+0x719/0x840 [ 157.459697][ C1] ? packet_rcv+0x2190/0x2190 [ 157.464356][ C1] __netif_receive_skb_core+0x3aed/0x51a0 [ 157.470068][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 157.476030][ C1] netif_receive_skb_internal+0x3cc/0xc20 [ 157.481739][ C1] napi_gro_receive+0x682/0xb90 [ 157.486575][ C1] receive_buf+0x653b/0x8810 [ 157.491161][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 157.497133][ C1] virtnet_poll+0x666/0x19d0 [ 157.501736][ C1] ? refill_work+0x460/0x460 [ 157.506316][ C1] net_rx_action+0x74b/0x1950 [ 157.510981][ C1] ? net_tx_action+0xba0/0xba0 [ 157.515749][ C1] __do_softirq+0x4a1/0x83a [ 157.520244][ C1] ? ksoftirqd_should_run+0x30/0x30 [ 157.525423][ C1] ? takeover_tasklets+0x900/0x900 [ 157.530614][ C1] run_ksoftirqd+0x25/0x40 [ 157.535012][ C1] smpboot_thread_fn+0x4a3/0x990 [ 157.539939][ C1] kthread+0x4b5/0x4f0 [ 157.543995][ C1] ? cpu_report_death+0x190/0x190 [ 157.549002][ C1] ? kthread_blkcg+0xf0/0xf0 [ 157.553587][ C1] ret_from_fork+0x35/0x40 [ 157.557983][ C1] [ 157.560286][ C1] Uninit was stored to memory at: [ 157.565289][ C1] kmsan_internal_chain_origin+0xcc/0x150 [ 157.570998][ C1] __msan_chain_origin+0x6b/0xe0 [ 157.575917][ C1] ___slab_alloc+0x1dbc/0x1fb0 [ 157.580671][ C1] kmem_cache_alloc+0xade/0xd10 [ 157.585498][ C1] skb_clone+0x326/0x5d0 [ 157.589719][ C1] packet_rcv_spkt+0x245/0x840 [ 157.594461][ C1] __netif_receive_skb_core+0x3aed/0x51a0 [ 157.600161][ C1] netif_receive_skb_internal+0x3cc/0xc20 [ 157.606030][ C1] napi_gro_receive+0x682/0xb90 [ 157.610869][ C1] receive_buf+0x653b/0x8810 [ 157.615455][ C1] virtnet_poll+0x666/0x19d0 [ 157.620034][ C1] net_rx_action+0x74b/0x1950 [ 157.624702][ C1] __do_softirq+0x4a1/0x83a [ 157.629186][ C1] run_ksoftirqd+0x25/0x40 [ 157.633585][ C1] smpboot_thread_fn+0x4a3/0x990 [ 157.638516][ C1] kthread+0x4b5/0x4f0 [ 157.642566][ C1] ret_from_fork+0x35/0x40 [ 157.646968][ C1] [ 157.649270][ C1] Uninit was created at: [ 157.653507][ C1] kmsan_internal_poison_shadow+0x58/0xb0 [ 157.659281][ C1] kmsan_slab_free+0x8d/0x100 [ 157.663947][ C1] kmem_cache_free_bulk+0x3ad9/0x3f50 [ 157.669412][ C1] __kfree_skb_flush+0xb0/0x100 [ 157.674343][ C1] net_rx_action+0x1908/0x1950 [ 157.679092][ C1] __do_softirq+0x4a1/0x83a [ 157.683580][ C1] run_ksoftirqd+0x25/0x40 [ 157.687976][ C1] smpboot_thread_fn+0x4a3/0x990 [ 157.692893][ C1] kthread+0x4b5/0x4f0 [ 157.696953][ C1] ret_from_fork+0x35/0x40 [ 157.701343][ C1] ================================================================== [ 157.709377][ C1] Disabling lock debugging due to kernel taint [ 157.715515][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 157.722081][ C1] CPU: 1 PID: 16 Comm: ksoftirqd/1 Tainted: G B 5.3.0-rc7+ #0 [ 157.730825][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 157.740870][ C1] Call Trace: [ 157.744148][ C1] dump_stack+0x191/0x1f0 [ 157.748475][ C1] panic+0x3c9/0xc1e [ 157.752375][ C1] kmsan_report+0x2ca/0x2d0 [ 157.756863][ C1] __msan_warning+0x75/0xe0 [ 157.761352][ C1] kmem_cache_free+0x3df/0x2b70 [ 157.766202][ C1] ? kfree_skb+0x473/0x4c0 [ 157.770606][ C1] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 157.776680][ C1] kfree_skb+0x473/0x4c0 [ 157.780921][ C1] ? packet_rcv_spkt+0x719/0x840 [ 157.785839][ C1] packet_rcv_spkt+0x719/0x840 [ 157.790588][ C1] ? packet_rcv+0x2190/0x2190 [ 157.795244][ C1] __netif_receive_skb_core+0x3aed/0x51a0 [ 157.800958][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 157.806925][ C1] netif_receive_skb_internal+0x3cc/0xc20 [ 157.812778][ C1] napi_gro_receive+0x682/0xb90 [ 157.817681][ C1] receive_buf+0x653b/0x8810 [ 157.822280][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 157.828259][ C1] virtnet_poll+0x666/0x19d0 [ 157.832843][ C1] ? refill_work+0x460/0x460 [ 157.837418][ C1] net_rx_action+0x74b/0x1950 [ 157.842102][ C1] ? net_tx_action+0xba0/0xba0 [ 157.846922][ C1] __do_softirq+0x4a1/0x83a [ 157.851425][ C1] ? ksoftirqd_should_run+0x30/0x30 [ 157.856611][ C1] ? takeover_tasklets+0x900/0x900 [ 157.861718][ C1] run_ksoftirqd+0x25/0x40 [ 157.866155][ C1] smpboot_thread_fn+0x4a3/0x990 [ 157.871079][ C1] kthread+0x4b5/0x4f0 [ 157.875141][ C1] ? cpu_report_death+0x190/0x190 [ 157.880160][ C1] ? kthread_blkcg+0xf0/0xf0 [ 157.884759][ C1] ret_from_fork+0x35/0x40 [ 157.890777][ C1] Kernel Offset: disabled [ 157.895106][ C1] Rebooting in 86400 seconds..