[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 76.858469][ T32] audit: type=1800 audit(1569337840.921:25): pid=11534 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 76.881961][ T32] audit: type=1800 audit(1569337840.951:26): pid=11534 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 76.906903][ T32] audit: type=1800 audit(1569337840.971:27): pid=11534 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.40' (ECDSA) to the list of known hosts. 2019/09/24 15:10:53 fuzzer started 2019/09/24 15:10:57 dialing manager at 10.128.0.26:32923 2019/09/24 15:10:58 syscalls: 2382 2019/09/24 15:10:58 code coverage: enabled 2019/09/24 15:10:58 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/09/24 15:10:58 extra coverage: enabled 2019/09/24 15:10:58 setuid sandbox: enabled 2019/09/24 15:10:58 namespace sandbox: enabled 2019/09/24 15:10:58 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/24 15:10:58 fault injection: enabled 2019/09/24 15:10:58 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/24 15:10:58 net packet injection: enabled 2019/09/24 15:10:58 net device setup: enabled syzkaller login: [ 223.767379][ C1] ================================================================== [ 223.775525][ C1] BUG: KMSAN: uninit-value in kmem_cache_free+0x3df/0x2b70 [ 223.783265][ C1] CPU: 1 PID: 16 Comm: ksoftirqd/1 Not tainted 5.3.0-rc7+ #0 [ 223.790644][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 223.800809][ C1] Call Trace: [ 223.804208][ C1] dump_stack+0x191/0x1f0 [ 223.808581][ C1] kmsan_report+0x162/0x2d0 [ 223.813122][ C1] __msan_warning+0x75/0xe0 [ 223.817672][ C1] kmem_cache_free+0x3df/0x2b70 [ 223.822546][ C1] ? kmsan_set_origin+0x6a/0xf0 [ 223.827507][ C1] ? kfree_skb+0x473/0x4c0 [ 223.831973][ C1] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 223.838082][ C1] kfree_skb+0x473/0x4c0 [ 223.842442][ C1] ? packet_rcv_spkt+0x719/0x840 [ 223.847405][ C1] packet_rcv_spkt+0x719/0x840 [ 223.852198][ C1] ? packet_rcv+0x2190/0x2190 [ 223.856901][ C1] __netif_receive_skb_core+0x3aed/0x51a0 [ 223.862657][ C1] ? cfg80211_autodisconnect_wk+0x4ad/0x570 [ 223.868966][ C1] ? kmsan_get_shadow_origin_ptr+0x71/0x4c0 [ 223.874887][ C1] ? netif_receive_skb_internal+0x383/0xc20 [ 223.880823][ C1] netif_receive_skb_internal+0x3cc/0xc20 [ 223.886612][ C1] napi_gro_receive+0x682/0xb90 [ 223.891688][ C1] receive_buf+0x653b/0x8810 [ 223.896331][ C1] ? kmsan_get_shadow_origin_ptr+0x71/0x4c0 [ 223.902244][ C1] virtnet_poll+0x666/0x19d0 [ 223.906966][ C1] ? refill_work+0x460/0x460 [ 223.911664][ C1] net_rx_action+0x74b/0x1950 [ 223.916374][ C1] ? net_tx_action+0xba0/0xba0 [ 223.921154][ C1] __do_softirq+0x4a1/0x83a [ 223.925709][ C1] ? ksoftirqd_should_run+0x30/0x30 [ 223.930926][ C1] ? takeover_tasklets+0x900/0x900 [ 223.936061][ C1] run_ksoftirqd+0x25/0x40 [ 223.940506][ C1] smpboot_thread_fn+0x4a3/0x990 [ 223.945485][ C1] kthread+0x4b5/0x4f0 [ 223.949571][ C1] ? cpu_report_death+0x190/0x190 [ 223.954621][ C1] ? kthread_blkcg+0xf0/0xf0 [ 223.959236][ C1] ret_from_fork+0x35/0x40 [ 223.963672][ C1] [ 223.966178][ C1] Uninit was stored to memory at: [ 223.971228][ C1] kmsan_internal_chain_origin+0xcc/0x150 [ 223.976965][ C1] __msan_chain_origin+0x6b/0xe0 [ 223.981925][ C1] ___slab_alloc+0x1dbc/0x1fb0 [ 223.986707][ C1] kmem_cache_alloc+0xade/0xd10 [ 223.991690][ C1] skb_clone+0x326/0x5d0 [ 223.995954][ C1] packet_rcv_spkt+0x245/0x840 [ 224.000741][ C1] __netif_receive_skb_core+0x3aed/0x51a0 [ 224.006487][ C1] netif_receive_skb_internal+0x3cc/0xc20 [ 224.012221][ C1] napi_gro_receive+0x682/0xb90 [ 224.017091][ C1] receive_buf+0x653b/0x8810 [ 224.021797][ C1] virtnet_poll+0x666/0x19d0 [ 224.026428][ C1] net_rx_action+0x74b/0x1950 [ 224.031156][ C1] __do_softirq+0x4a1/0x83a [ 224.035673][ C1] run_ksoftirqd+0x25/0x40 [ 224.040202][ C1] smpboot_thread_fn+0x4a3/0x990 [ 224.045251][ C1] kthread+0x4b5/0x4f0 [ 224.049345][ C1] ret_from_fork+0x35/0x40 [ 224.053757][ C1] [ 224.056091][ C1] Uninit was created at: [ 224.060346][ C1] kmsan_internal_poison_shadow+0x58/0xb0 [ 224.066080][ C1] kmsan_slab_free+0x8d/0x100 [ 224.070795][ C1] kmem_cache_free_bulk+0x3ad9/0x3f50 [ 224.076180][ C1] __kfree_skb_flush+0xb0/0x100 [ 224.081154][ C1] net_rx_action+0x1908/0x1950 [ 224.085925][ C1] __do_softirq+0x4a1/0x83a [ 224.090441][ C1] irq_exit+0x230/0x280 [ 224.094690][ C1] do_IRQ+0x20d/0x3a0 [ 224.098693][ C1] ret_from_intr+0x0/0x33 [ 224.103039][ C1] default_idle+0x53/0x90 [ 224.107915][ C1] arch_cpu_idle+0x25/0x30 [ 224.112428][ C1] do_idle+0x1d7/0x790 [ 224.116480][ C1] cpu_startup_entry+0x45/0x50 [ 224.121240][ C1] start_secondary+0x370/0x470 [ 224.125998][ C1] secondary_startup_64+0xa4/0xb0 [ 224.130993][ C1] ================================================================== [ 224.139046][ C1] Disabling lock debugging due to kernel taint [ 224.145196][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 224.151777][ C1] CPU: 1 PID: 16 Comm: ksoftirqd/1 Tainted: G B 5.3.0-rc7+ #0 [ 224.160606][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 224.170670][ C1] Call Trace: [ 224.173974][ C1] dump_stack+0x191/0x1f0 [ 224.179714][ C1] panic+0x3c9/0xc1e [ 224.183651][ C1] kmsan_report+0x2ca/0x2d0 [ 224.188251][ C1] __msan_warning+0x75/0xe0 [ 224.192744][ C1] kmem_cache_free+0x3df/0x2b70 [ 224.197590][ C1] ? kmsan_set_origin+0x6a/0xf0 [ 224.202427][ C1] ? kfree_skb+0x473/0x4c0 [ 224.206830][ C1] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 224.212905][ C1] kfree_skb+0x473/0x4c0 [ 224.217130][ C1] ? packet_rcv_spkt+0x719/0x840 [ 224.222049][ C1] packet_rcv_spkt+0x719/0x840 [ 224.226805][ C1] ? packet_rcv+0x2190/0x2190 [ 224.231462][ C1] __netif_receive_skb_core+0x3aed/0x51a0 [ 224.237300][ C1] ? cfg80211_autodisconnect_wk+0x4ad/0x570 [ 224.243207][ C1] ? kmsan_get_shadow_origin_ptr+0x71/0x4c0 [ 224.249186][ C1] ? netif_receive_skb_internal+0x383/0xc20 [ 224.255068][ C1] netif_receive_skb_internal+0x3cc/0xc20 [ 224.260785][ C1] napi_gro_receive+0x682/0xb90 [ 224.265673][ C1] receive_buf+0x653b/0x8810 [ 224.270286][ C1] ? kmsan_get_shadow_origin_ptr+0x71/0x4c0 [ 224.276181][ C1] virtnet_poll+0x666/0x19d0 [ 224.280785][ C1] ? refill_work+0x460/0x460 [ 224.285358][ C1] net_rx_action+0x74b/0x1950 [ 224.290036][ C1] ? net_tx_action+0xba0/0xba0 [ 224.294796][ C1] __do_softirq+0x4a1/0x83a [ 224.299847][ C1] ? ksoftirqd_should_run+0x30/0x30 [ 224.305033][ C1] ? takeover_tasklets+0x900/0x900 [ 224.310320][ C1] run_ksoftirqd+0x25/0x40 [ 224.314856][ C1] smpboot_thread_fn+0x4a3/0x990 [ 224.319827][ C1] kthread+0x4b5/0x4f0 [ 224.323894][ C1] ? cpu_report_death+0x190/0x190 [ 224.329017][ C1] ? kthread_blkcg+0xf0/0xf0 [ 224.333629][ C1] ret_from_fork+0x35/0x40 [ 224.339765][ C1] Kernel Offset: disabled [ 224.344097][ C1] Rebooting in 86400 seconds..